The Invicti Port Scanner performs a port scan against the server hosting the scanned website. When open ports are found, Invicti Web Vulnerability Scanner will proceed with network level security checks against the network service running on that port, such as DNS Open Recursion tests,…
Author Archives Nicholas Sciberras
THE AUTHOR
Nicholas Sciberras
Principal Program Manager
Principal Program Manager
Invicti 10 new build checks for vulnerabilities in Composer, Zend Framework, AjaxControlToolkit
Invicti WVS v.10 (build 20150921) has been released. This new build checks for Cross Site Scripting in mobile-touch event handlers and for various vulnerabilities in products such as Composer, Zend Framework, AjaxControlToolkit and others. Below is a full list of updates. New Features Added a…
Increased support for REST, Java and Ruby on Rails testing
Invicti WVS v10 improves its support for crawling and identifying vulnerabilities in various web technologies. This is the result of feedback gathered during the past months from our user-base. Keeping abreast with updates to web technologies is of utmost importance, as it allows Invicti to…
Can I use a Free Scan Target to scan for web vulnerabilities?
Free Scan Targets pertain to perimeter servers which you can scan for network vulnerabilities only. Invicti Online customers can upgrade a Free Scan Target to a licensed Scan Target in order to scan the target for web vulnerabilities. This can be done by clicking on the…
Critical XSS vulnerability addressed in latest WordPress update
Yesterday, WordPress 4.1.2 was released. This is a very important security release, which addresses a critical cross-site scripting (XSS) vulnerability, which could allow an anonymous user to compromise a WordPress site. The security release also addresses 3 other vulnerabilities affecting previous releases of WordPress. In…
Invicti detects new critical IIS server vulnerability CVE-2015-1635 (MS15-034)
Yesterday was Patch Tuesday – Microsoft’s monthly rendezvous with all administrators wanting to keep their Microsoft products up to date with all security patches. This was no ordinary Patch Tuesday for web administrators. MS15-034 contains a CRITICAL security update for Microsoft IIS which addresses a remote…
FREAK first major SSL bug for 2015
If anyone thought that big bugs would end with (a disastrous) 2014, 2015 looks as though it will also cause network admins to fret. The first in the series of BIG bugs for 2015 has just been uncovered. Nicknamed FREAK, this vulnerability breaks SSL, allowing…
What to look for when choosing a web vulnerability scanner
Evaluating a web vulnerability scanner is not the easiest of tasks. With a multitude of open source and commercial products to choose from, all promising to provide the best of breed scanning functionality, choosing the right web vulnerability scanner is a tough, albeit important decision….
5 most dangerous software bugs of 2014
Wired have just released the 5 most dangerous software bugs in 2014 – 3 of which affect web security. Once again, web sites, web applications and web servers are the main source of concern for IT administrators trying to prevent unauthorised access from the internet….