Yesterday, the details of the latest vulnerability affecting SSL started emerging, and in no time, everyone started talking, or rather blogging about POODLE. POODLE stands for Padding Oracle On Downgraded Legacy Encryption and affects the 15 year old SSLv3, which should have been deprecated and…
How to Configure Invicti to Successfully Crawl WIVET
WIVET stands for Web Input Extractor Teaser, and is a web application that is designed to test the crawling capabilities of web application scanners. WIVET has been used in web application scanner reviews, such as the reputable review by Shay Chen – The Web Application Vulnerability…
ShellShock’s magnitude for potential damage – truly shocking!
48 hours since the latest in the series of BIG BUGS 2014 has made the news, and the Internet community is still struggling to assess the damage. After the initial moments of disbelief, researchers started coming to terms with the fact that Bash had a…
BASH Vulnerability leaves IT Experts Shell Shocked!
Yesterday, a critical vulnerability was reported in GNU Bash.  Bash is the Bourne Again Shell that is installed on all Linux distributions.  The vulnerability is related to the way environment variables are parsed before running the BASH shell. It is possible to create environment variables that include…
Invicti OVS Update, Spots Vulnerabilities with Military Precision
An important update has just been rolled out to Invicti Online Vulnerability Scanner (OVS) which includes 2 features unique to Invicti – AcuSensor and AcuMonitor. Both technologies have been successfully used in Invicti WVS to enhance scan results by improving vulnerability detection and detecting difficult…
Statistics about the leaked Gmail, Yandex, Mail.ru passwords
Around 10 million email addresses and passwords were recently leaked on a Russian Bitcoin forum. Many websites report about 5 million Gmail accounts the leak includes also accounts from 2 popular russian mail providers (Yandex and Mail.ru). The leak contains the following: ~5 million Gmail…
Alliance Training Courses Improve Invicti User Skills
Alliance Technology Partners, partnering with Invicti since 2007, have announced they shall be offering Invicti Training Courses, delivered via the web, by two of their senior security engineers. This Basic Training 3 hour course, is highly interactive and tailored to the users’ experience level and…
WordPress 4.0 “Benny” released
The long awaited WordPress version 4.0, codenamed “Benny” in honour of jazz clarinettist and band leader Benny Goodman has been released. While this does seem like a major release to some of us, since it includes a good amount of features easing the blog writers’…
List of checks done by Invicti on WordPress
In a bid to ensure WordPress Security, an Invicti web vulnerability scan is able to detect a WordPress installation, and will execute various WordPress related checks when the popular blogging web application is identified. When WordPress is detected, Invicti will issue the following knowledge base…