These are the latest updates we've made to our platform. If you have any questions about any of the updates you see below, please feel free to contact us!
The Network Scanner can now detect the entry point for the ProxyShell attack chain (CVE-2021-34473).
Added the possibility to run a scheduled scan now, on demand.
The New Website Scanner will provide at the end of a scan result some stats: URLs spidered, the total number of HTTP requests, error count, etc.
Added to URL Fuzzer the possibility to control the delay between the requests. A retry delays factor is also added to increase exponentially the delay.
Added the possibility to filter certain results (eg. ignore or match certain HTTP codes, ignore or match if the HTML contains a string) to URL Fuzzer.
We increased the maximum size of a Wordlist from 10000 words to 50000 words.
The Website Scanner findings will now be classified by OWASP 2013, OWASP2017 and CWE. Check the Details of a finding to see more.
Added the possibility to specify custom request timing options and the maximum number of retries to URL Fuzzer.
The Password Auditor now supports the NTLM authentication protocol.
The Network Scanner can now detect the VMware vCenter Unauthenticated RCE (CVE-2021-21972) vulnerability.
The URL Fuzzer now allows you to fuzz HTTP POST requests.
Our new Website Scanner (currently in beta) will now check for sensitive data (email addresses, social security numbers, credit card numbers) in target applications.
We launched a new Website Scanner (currently in beta) fully written by our team. It allows you to select which tests you want to run and it returns less False Positives than the current deep scanner.
The Network Scanner can now the Microsoft Exchange CVE-2021-26855 SSRF vulnerability (ProxyLogon).
The Network Scanner can now detect the F5 BIG-IP CVE-2021-22986 unauthenticated remote code execution vulnerability.
The Network Scanner can now detect Hafnium webshells injected during ProxyLogon attacks.
We started to develop custom detection modules which are being added to the standard OpenVAS Network Scanner scans in order to detect high risk vulnerabilities in commercial software.
Besides wordlists, the URL Fuzzer can now send a sequence of numbers as payload.
Check if a Microsoft Exchange server is affected by CVE-2021-26855, a vulnerability which can lead to disclosure of sensitive information and to RCE.
The target name and the workspace have been added to the cards created in Jira.
