Many years ago it used to be that most web hacking attempts were launched by sophisticated cybercriminals, or at the very least highly talented amateurs using complex methods and tools. While this meant such attacks could be more difficult to prevent – they were usually…
Author Archives Invicti
THE AUTHOR
Invicti
Invicti Announces Full HTML5 Support
As new technologies bring new security risks to light, Invicti steps up to the challenge with the most comprehensive crawling and scanning technology in the market yet. MALTA, 15 August 2013 — Invicti today announced the 9th release of its award-winning Web Vulnerability Scanner, building on the experience…
Blind XSS: The Ticking Time Bomb of XSS Attacks
What is Blind XSS? Blind XSS is a flavor of cross site scripting (XSS), where the attacker “blindly” deploys a series of malicious payloads on web pages that are likely to save them to a persistent state (like in a database, or in a log…
Protect your WordPress from Mass Brute Force Attacks
Last week a sophisticated botnet that targets and launches brute force attacks against WordPress blogs and websites has been detected. Some WordPress hosting providers suffered downtime, security experts are exploiting this opportunity to sell their WordPress security services and thousands of WordPress sites have been…
"Social Media Widget" Adds New Undocumented Feature – Spam Injection
WordPress.com have removed the rather popular Social Medial Widget (nearly a million downloads) from the plugin repository. The most recent version of the plugin was found to be injecting spam messages with the social media icons on the sites using the plugin. It seems that…
Is Your Security Appliance Hackable?
In the late 90’s, businesses embraced the internet; they connected their networks and servers to the internet so their data can be accessed from anywhere around the world. This was a new era that gave businesses the opportunity to grow globally and reach new audiences….
Unable to Download Error Whilst Trying to Update Invicti WVS
Symptoms When trying to update the latest build from Invicti WVS, you encounter the following error: Unable to download https://www.acunetix.com/download/ fullver8/2013_03_08_01_webvulnscan8.exe. Try again later. More Information Invicti has recently changed its update mechanism to a new and secure product download system. This update has been…
Finding Broken Links Using Invicti WVS
Invicti WVS has the ability to discover links to pages that do not exist. In a world where sites are updated on a daily basis, it is quite easy to remove a page and forget to amend all links which refer to it resulting in…
Logical and Technical Vulnerabilities – What they are and how can they be detected?
Web vulnerabilities can be split into two distinct groups; Technical Vulnerabilities and Logical Vulnerabilities. Technical vulnerabilities can be found by using automated processes, such as scanning a website with a web vulnerability scanner. On the other hand, logical vulnerabilities can only be detected manually. This…