Everybody’s talking about the ASP.NET Padding Oracle vulnerability released a few days ago at the ekoparty Security Conference. However, until now there wasn’t enough information on how do you check if your application is vulnerable or not. Yesterday, Duncan Smart from ASP.NET forums published some…
Directory Traversal in Axigen v7.4.1 running on Windows
Note: This article refers to an older version of Invicti. Click here to download the latest version. We are continuing with the list of security vulnerabilities found in a number of web applications while testing our latest version of Invicti WVS v7 . In this…
Invicti 7 makes web application security checking easier and more cost effective
New scanning engine with improved vulnerability detection AND verification makes finding and fixing security issues in web applications easier. London, 1st September 2010 – Invicti, a market leader in web application security scanning technology, today announced version 7 of its popular Web Vulnerability Scanner. With…
Invicti WVS Version 7 BETA is available!
Note: This is no longer available. Click here to download a 14-day free trial of the latest version of Invicti. A new version of Invicti Web Vulnerability Scanner is available in beta, and what a version! It has been one long year of development, testing…
Invicti takes first place in black box web vulnerability scanners comparison
Invicti Web Vulnerability Scanner placed first in a paper released by Adam Doup´e, Marco Cova, and Giovanni Vigna from the University of California, Santa Barbara. In the paper “Why Johnny Can’t Pentest: An Analysis of Black-box Web Vulnerability Scanners”, the authors compared the capalities of…
Invicti WVS helps Digicure discover web vulnerabilities
A proper web security audit is a mixture of automated and manual tests; Invicti WVS provides a comprehensive tool for automated testing purposes and useful toolbox Digicure can use for manual penetration testing as well. “The most impressive thing about Invicti Web Vulnerability Scanner must…
SQL Injection hits again; 168,000 personal records exposed
A hacker, who calls himself “ins3cted”, has demonstrated to Webwereld via video how by exploiting a simple SQL injection, he can retrieve 168,000 personal records from a Dutch website called Experience the OV (http://www.ervaarhetov.nl). Citizens living in the provinces of Gelderland, Overijssel and Flevoland are…
Gray Powell and the lost iPhone, and malware
In case you didn’t hear about it already, the story of the day is Gray Powell and the lost iPhone. So I searched for him on Google. I was really surprised to see that 4 out of 10 results from Google’s first page were links…
Invicti voted Windowsecurity.com readers’ choice award winner
Invicti Web Vulnerability Scanner Voted Windowsecurity.Com Readers’ Choice Award Winner for the third time in a row London, UK – 25 February 2010 – Leading Windows Security resource site, WindowSecurity.com, announced today that Invicti Web Vulnerability Scanner was selected the winner in the Web Application Security…