Acunetix http://www.acunetix.com Web Vulnerability Scanner Fri, 24 May 2013 08:31:08 +0000 en-US hourly 1 Web Security Vulnerabilities Exposed by Google Searches (Google Hacking) http://www.acunetix.com/blog/web-security-zone/web-vulnerabilities-exposed-by-google-searches/ http://www.acunetix.com/blog/web-security-zone/web-vulnerabilities-exposed-by-google-searches/#comments Fri, 24 May 2013 08:07:54 +0000 Chrysostomos Daniel http://www.acunetix.com/?p=9077 Google Hacking is a hacking technique used by hackers to identify web security vulnerabilities on web applications or gather information for general or individual targets. Mostly this information includes configuration and source code files, sensitive data, database information, etc. This ... [+]

The post Web Security Vulnerabilities Exposed by Google Searches (Google Hacking) appeared first on Acunetix.

]]> http://www.acunetix.com/blog/web-security-zone/web-vulnerabilities-exposed-by-google-searches/feed/ 0 Responding to DoS attacks at the web layer http://www.acunetix.com/blog/featured/responding-to-dos-attacks-at-the-web-layer/ http://www.acunetix.com/blog/featured/responding-to-dos-attacks-at-the-web-layer/#comments Wed, 15 May 2013 12:40:43 +0000 Kevin Beaver http://www.acunetix.com/?p=9016 Are you ready to respond to DoS attacks at the web layer? In this article, Kevin Beaver shares an anecdote from his own experience whilst highlighting some important steps to take. First things first; responding to DoS attacks at the ... [+]

The post Responding to DoS attacks at the web layer appeared first on Acunetix.

]]> http://www.acunetix.com/blog/featured/responding-to-dos-attacks-at-the-web-layer/feed/ 2 Scanning a Template-based Website Using Acunetix WVS http://www.acunetix.com/blog/docs/scanning-template-based-websites/ http://www.acunetix.com/blog/docs/scanning-template-based-websites/#comments Fri, 26 Apr 2013 10:03:09 +0000 Mark Flores Martin http://www.acunetix.com/?p=8978 Scanning a large website very often takes a long time. Using the default settings, Acunetix Web Vulnerability Scanner will first try to identify all the pages using various crawling techniques, and will then proceed to scan the pages that have ... [+]

The post Scanning a Template-based Website Using Acunetix WVS appeared first on Acunetix.

]]> http://www.acunetix.com/blog/docs/scanning-template-based-websites/feed/ 2 WordPress Caching Plugins Remote PHP Code Execution http://www.acunetix.com/blog/web-security-zone/wp-plugins-remote-code-execution/ http://www.acunetix.com/blog/web-security-zone/wp-plugins-remote-code-execution/#comments Tue, 23 Apr 2013 13:20:39 +0000 Bogdan Calin http://www.acunetix.com/?p=8947 Two very popular WordPress caching plugins: WP Super Cache (4,373,811 downloads) and W3 Total Cache (1,975,480 downloads) have been affected by a vulnerability that allows remote users to execute arbitrary PHP code. The affected versions are: WP Super Cache (version 1.2 and below, ... [+]

The post WordPress Caching Plugins Remote PHP Code Execution appeared first on Acunetix.

]]> http://www.acunetix.com/blog/web-security-zone/wp-plugins-remote-code-execution/feed/ 14 WordPress Attack Vectors and Open Amazon S3 Buckets Identified by Acunetix WVS http://www.acunetix.com/blog/web-security-zone/wp-brute-force-and-wvs-checks/ http://www.acunetix.com/blog/web-security-zone/wp-brute-force-and-wvs-checks/#comments Thu, 18 Apr 2013 12:03:56 +0000 Bogdan Calin http://www.acunetix.com/?p=8905 Recently there were a lot of news reports about an ongoing attack on sites using WordPress software. Attackers are using around 90,000 computers to try to brute force WordPress credentials. All these servers are trying common account names like admin, administrator, ... [+]

The post WordPress Attack Vectors and Open Amazon S3 Buckets Identified by Acunetix WVS appeared first on Acunetix.

]]> http://www.acunetix.com/blog/web-security-zone/wp-brute-force-and-wvs-checks/feed/ 0 New WordPress Checks in Acunetix Web Vulnerability Scanner v8 build 20130416 http://www.acunetix.com/blog/releases/acunetix-wvs-v8-build-20130416/ http://www.acunetix.com/blog/releases/acunetix-wvs-v8-build-20130416/#comments Thu, 18 Apr 2013 11:18:47 +0000 Nicholas Sciberras http://www.acunetix.com/?p=8928 This new release of Acunetix Web Vulnerability Scanner version 8, build 20130416, includes new and improved vulnerability checks which target WordPress installations, web applications hosted on Amazon S3, various other web applications. New Functionality Added a test that enumerates valid ... [+]

The post New WordPress Checks in Acunetix Web Vulnerability Scanner v8 build 20130416 appeared first on Acunetix.

]]> http://www.acunetix.com/blog/releases/acunetix-wvs-v8-build-20130416/feed/ 1 The Risks Associated with Third-Party Software Components http://www.acunetix.com/blog/web-security-zone/risks-associated-with-third-party-software/ http://www.acunetix.com/blog/web-security-zone/risks-associated-with-third-party-software/#comments Tue, 16 Apr 2013 12:55:07 +0000 Kevin Beaver http://www.acunetix.com/?p=8724 I was recently contacted by a colleague in an information security leadership position who was concerned about his developers using some third-party plug-ins for an enterprise application they were rolling out. His developers wanted to install these third-party components in ... [+]

The post The Risks Associated with Third-Party Software Components appeared first on Acunetix.

]]> http://www.acunetix.com/blog/web-security-zone/risks-associated-with-third-party-software/feed/ 0 What Happens when you can’t Find Every Web Vulnerability? http://www.acunetix.com/blog/web-security-zone/cant-find-every-web-vulnerability/ http://www.acunetix.com/blog/web-security-zone/cant-find-every-web-vulnerability/#comments Tue, 09 Apr 2013 14:37:17 +0000 Kevin Beaver http://www.acunetix.com/?p=8728 On one end of the application security and IT audit spectrum we have people that overlook the obvious and critical stuff. But just as dangerously, on the other end of the spectrum we have people who want us to find ... [+]

The post What Happens when you can’t Find Every Web Vulnerability? appeared first on Acunetix.

]]> http://www.acunetix.com/blog/web-security-zone/cant-find-every-web-vulnerability/feed/ 0 Is Your Security Appliance Hackable? http://www.acunetix.com/blog/web-security-zone/security-appliance-hackable/ http://www.acunetix.com/blog/web-security-zone/security-appliance-hackable/#comments Mon, 01 Apr 2013 12:26:16 +0000 Robert Abela http://www.acunetix.com/?p=8810 In the late 90’s, businesses embraced the internet; they connected their networks and servers to the internet so their data can be accessed from anywhere around the world. This was a new era that gave businesses the opportunity to grow ... [+]

The post Is Your Security Appliance Hackable? appeared first on Acunetix.

]]> http://www.acunetix.com/blog/web-security-zone/security-appliance-hackable/feed/ 0 Acunetix WVS Update 20130308 – New Security Tests http://www.acunetix.com/blog/docs/acunetix-20130308-new-tests/ http://www.acunetix.com/blog/docs/acunetix-20130308-new-tests/#comments Mon, 01 Apr 2013 09:26:39 +0000 Bogdan Calin http://www.acunetix.com/?p=8681 Apart from the usual bug fixes / new functionality, each Acunetix WVS update generally includes new vulnerability tests or an improvement to existing checks. In this post, I would like to summarize the new security tests added in the latest ... [+]

The post Acunetix WVS Update 20130308 – New Security Tests appeared first on Acunetix.

]]> http://www.acunetix.com/blog/docs/acunetix-20130308-new-tests/feed/ 3