A new Invicti Premium update has been released for Windows, Linux, and macOS: 14.7.220228146 This Invicti release introduces multiple IAST updates that will help detect several high severity vulnerabilities, provide full coverage for the newly supported web frameworks, and improve the detection of server-side misconfigurations….
Invicti releases multiple updates to detect Log4j vulnerabilities
Over the past week, we have been busy updating Invicti to detect Log4j vulnerabilities that have been making the headlines. Invicti is detecting the CVE-2021-44228 vulnerability (Log4Shell) as an out-of-band vulnerability using the AcuMonitor service. In addition, the AcuMonitor service and Invicti have been updated…
Invicti introduces support for the detection of HTTP/2 vulnerabilities and improves handling of Laravel CSRF tokens
A new Invicti Premium update has been released for Windows, Linux, and macOS: 14.6.211207099. This Invicti release introduces support for the detection of HTTP/2 vulnerabilities. HTTP/2 is an upgrade to the HTTP protocol and is used more and more frequently. It does however introduce a…
Invicti introduces support for Brotli encoding, IAST support for new Node.js frameworks, and many new vulnerability checks
A new Invicti Premium update has been released for Windows, Linux, and macOS: 14.5.211008143. This Invicti release introduces support for the Brotli encoding and URL optional fields. The Node.js IAST AcuSensor has been updated to support numerous frameworks and the JAVA IAST AcuSensor can now…
Invicti introduces pre-request scripts, log data retention options, and many new vulnerability checks
A new Invicti Premium update has been released for Windows, Linux, and macOS: 14.4.210816098. This Invicti release introduces pre-request scripts that can be developed using the existing custom vulnerability scripts syntax, new log data retention options, and new vulnerability checks for Oracle E-Business Suite, Alibaba…
Invicti introduces software composition analysis (SCA)
A new Invicti update has been released for Windows, Linux, and macOS: 14.3.210615184. This Invicti release introduces software composition analysis (SCA) functionality, allowing customers to detect vulnerable open-source libraries used by the web application. It also provides multiple updates, including a revised PCI DSS compliance…
Invicti introduces Docker support, scan statistics, and the ability to send vulnerabilities to the AWS WAF
A new Invicti update has been released for Windows, Linux, and macOS: 14.2.210503151. This Invicti update introduces Docker support, a new Scan Statistics page that is shown for each scan, and the ability to send vulnerability information to the AWS WAF. Customers sending vulnerabilities to…
Invicti introduces web asset discovery, NLTM Auth support for proxy auth, multi-engine updates, and new vulnerability checks
A new Invicti update has been released for Windows, Linux, and macOS: 14.1.210316110. This Invicti update introduces web asset discovery, allowing Invicti users to easily identify web assets, which might have been forgotten and which belong to their organization. In addition, the Invicti UI now…
Invicti update introduces Node.js AcuSensor, target knowledge base, and multiple unrestricted access vulnerability checks
A new Invicti update has been released for Windows, Linux, and macOS: 13.0.210129162. This Invicti update introduces AcuSensor for Node.js and a feature called target knowledge base, which holds data from past scans and helps improve future scans. We also made fully qualified domain names…