Invicti Online has undergone a mammoth update, now enjoying all the features and benefits found in Invicti On-Premises, including: Integrated vulnerability management, greater manageability of threats and targets and the integration of popular WAFs and Issue Tracking systems. Invicti Online also features a brand new…
What is a Host Header Attack?
It is common practice for the same web server to host several websites or web applications on the same IP address. This why the host header exists. The host header specifies which website or web application should process an incoming HTTP request. The web server…
How to scan an HTTP Authentication restricted area
In addition to support for form authentication, which Invicti supports via the Login Sequence Recorder, you can also scan areas of a website or web application which are restricted through the means of HTTP Authentication. HTTP Authentication, sometimes referred to as Basic Authentication, is a…
Port scanning with Server Side Request Forgery (SSRF)
As a pen-tester, there are going to be situations where you will be asked to provide evidence of the seriousness of a vulnerability that has been identified. There is ample documentation on how to do this for the more common vulnerabilities such as Cross-site Scripting…
Scanning for vulnerabilities using Custom Cookies
There may be some cases in which a website or web application you are scanning requires custom cookies to be set to be scanned properly. In Invicti, you can set custom cookies which will be used during the crawl and scan. To add a custom…
Invicti receives highest score for “Penetration Testing” Use Case
Gartner’s 2017 Critical Capabilities for Application Security Testing Report Gartner, Inc., the leading provider of research and analysis on the global information technology industry, has recognised Invicti as a Challenger in February 2017 Magic Quadrant for Application Security Testing (AST), and has given Invicti the…
Invicti Jenkins Plugin provides DevOps with on the spot identification of web vulnerabilities
Continuous Integration is a software development practice which involves the frequent merging, or integration of work from different developers on a team. Not only does CI help eliminate tedious and error-prone work, but it also reduces the chance of bugs – including web vulnerabilities. With…
Invicti showcased at the Security Show Tokyo, Japan
ComWorth Co., Ltd. Invicti Professional Partners for Japan, exhibited at Security Show, Japan’s largest comprehensive exhibition of the security and safety industry. The show which was held between the 7th and 10th of March 2017 at the Tokyo International Exhibition Centre, housed a wide spectrum of…
How do I update to the latest Invicti build?
Keeping Invicti up-to-date is important to ensure you always get the latest updates to existing and newly added tests, features, bugfixes and improvements. Fortunately it’s not only easy but transparent. By default Invicti automatically checks for updates, installs any new updates in the background without…