These are the latest updates we've made to our platform. If you have any questions about any of the updates you see below, please feel free to contact us!
Our upgraded Website Scanner effortlessly identifies SPAs by harnessing browser-based spidering. Seamlessly explore websites by selecting the SPA option under Custom Scan -> Engine Options -> Spidering Approach. Moreover, when opting for the Deep Scan with SPA detection, our tool automatically enables browser-based spidering for a comprehensive scanning experience.
We've added official support for VMware ESXi for our VPN Agent.
Sniper can exploit an RCE vuln discovered in Atlassian Jira (CVE-2019-11581).
Sniper can exploit an RCE vuln discovered in the Oracle WebLogic Servers (CVE-2023-21839).
Sniper can exploit an RCE vulnerability found in the archive unpacking utility named cpio, which is part of the Zimbra Collaboration (CVE-2022-41352).
The Subdomain Finder now includes an option (enabled by default) to query Bing Search via its API to search for subdomains.
You can now detect server-side and client-side Request Smuggling vulnerabilities with our Website Scanner.
With this new method, the Subdomain Finder searches for subdomains in a recursive manner. When a subdomain is discovered, a new search is started using a different list of words specifically for subdomains. This process continues until no more subdomains are found.
What's new: an updated and modern UI, better filtering, a new 'Next scan' column.
Fixed findings are now ignored when calculating the risk level of the target.
Sniper can exploit a critical flaw in Joomla 4.0.0 through 4.2.7. An improper access check allows unauthorized access to web service endpoints. (CVE-2023-23752)
Website Scanner now extracts the database version after checking and finding SQL injection.
Website Scanner now includes HTTP requests and responses in the findings found with the Website Scanner.
We've added the Blind XSS injection type (to the current XSS detectors) you can now detect with our Website Scanner.
You can now check for XSS through template expressions in AngularJS and Vue apps using our Website Scanner.
We've added 'Group/Order By' payloads in our SQL Injection detector from Website Scanner so you can better detect these high-risk vulns.
Sniper can exploit a critical RCE flaw in Apache Commons Text packages 1.5 through 1.9. This vuln affects the StringSubstitutor interpolar class, which is included in the Commons Text library.
We have a new scan option 'Enable extensive modules' you can use to run for an extended period of time. Enabling this option increases the scan duration.
We've added the option to include separated URLs in the Website Scanner to make sure there aren't any redirects and you are scanning the correct ones. You can add a list of your specific URLs and start scanning.
Sniper can exploit an unauthenticated RCE vuln found in the external control of file name or path in the Fortinet FortiNAC versions. (CVE-2022-39952)
