The earliest public mention I could find of SQL Injection (âpiggybacking SQL statementsâ as the author put it) was from someone who called himself Rain Forest Puppy (RFP). In 1998 RFP wrote an article for Phrack Magazine (Volume 9, Issue 54) in which he talks…
Author Archives Invicti
THE AUTHOR
Invicti
Sites Infected with Website Malware Every 3.6 Seconds
A lot of web sites out there have an array of vulnerabilities and your site could easily be one of them! A recent study based on the first six months of this year found that every 3.6 seconds a new web site is infected. That…
Invicti WVS Version 6.5 build 20091027 released
An updated build for Invicti WVS Version 6.5 has been released. Â It includes a number of bug fixes. Bug fixes: Fixed: Redirect on LoginSequenceStep was not followed correctly Fix in URL Rewrite module to remove GetVars before matching rules How to upgrade: On starting up…
Invicti WVS Version 6.5 build 20091012 released
An updated build for Invicti WVS Version 6.5 has been released with some bug fixes. Bug fixes: Fixed: Memory leak when invoking state change handler Fixed: Item index for an item which has just been inserted fails in the Browserframe Fixed: Error in indexing the…
Secure Password Recommendations and Research
You have a lot of things you try to keep secure, and some of them you simply have to put in other people’s hands because you canât do it on our own (like your website *hint hint*). However, there are some things you do have…
Invicti WVS Version 6.5 build 20091005 released
An updated build for Invicti WVS Version 6.5 has been released with some improvements, bug fixes and new security checks. New: Added a new check for SVN repositories Improvements: Improved MultiRequest paramenter manipulation; now using the form matcher to match parameter values Improved SQL injection…
Invicti WVS Version 6.5 build 20090917 released
An updated build for Invicti Version 6.5 has been released with some improvements and bug fixes. New: Added two new blind SQL injection tests Added a new scanning profile for stored XSS only Added HTTP verb tempering using POST method check Improvements: Improved appearance for…
SQL injection used in largest data security breach in U.S. history to date
Three men, responsible for the largest data security breach in U.S. history, stole 130 million credit and debit card numbers from five leading companies. They took advantage of a coding error, and allegedly used a SQL injection attack to compromise a web application, which was…
New Invicti WVS V6.5 build; better support for CAPTCHA and modern authentication mechanisms
With the release of Invicti WVS Version 6.5 latest build; 20090728 (https://www.acunetix.com/support/build-history.htm), we announce that Invicti WVS has better support for web applications with CAPTCHA, single sign-on and Two factor authentication mechanisms. Â Thanks to the new ‘Manual Intervention’ module, IT security professionals can now save…