On one end of the application security and IT audit spectrum we have people that overlook the obvious and critical stuff. But just as dangerously, on the other end of the spectrum we have people who want us to find every single flaw on every…
Is Your Security Appliance Hackable?
In the late 90’s, businesses embraced the internet; they connected their networks and servers to the internet so their data can be accessed from anywhere around the world. This was a new era that gave businesses the opportunity to grow globally and reach new audiences….
Invicti WVS Update 20130308 – New Security Tests
Apart from the usual bug fixes / new functionality, each Invicti WVS update generally includes new vulnerability tests or an improvement to existing checks. In this post, I would like to summarize the new security tests added in the latest Invicti WVS update. Unicode Transformation…
Unable to Download Error Whilst Trying to Update Invicti WVS
Symptoms When trying to update the latest build from Invicti WVS, you encounter the following error: Unable to download https://www.acunetix.com/download/ fullver8/2013_03_08_01_webvulnscan8.exe. Try again later. More Information Invicti has recently changed its update mechanism to a new and secure product download system. This update has been…
Finding Broken Links Using Invicti WVS
Invicti WVS has the ability to discover links to pages that do not exist. In a world where sites are updated on a daily basis, it is quite easy to remove a page and forget to amend all links which refer to it resulting in…
Logical and Technical Vulnerabilities – What they are and how can they be detected?
Web vulnerabilities can be split into two distinct groups; Technical Vulnerabilities and Logical Vulnerabilities. Technical vulnerabilities can be found by using automated processes, such as scanning a website with a web vulnerability scanner. On the other hand, logical vulnerabilities can only be detected manually. This…
The US National Vulnerability Database was Hacked and Infected with Malware
The US National Vulnerability Database has been hacked and infected with malware on the 8th of March 2013. Until today, the same place from where both black hats and white hats get information about existing software vulnerabilities, is still offline (15th of May 2013). So…
New security checks in Invicti Web Vulnerability Scanner v8 build 20130308
This new release of Invicti Web Vulnerability Scanner version 8 – build 20130308– includes a number of new security tests, most of which are product-specific, as well as various improvements in Cross-Site Scripting (XSS) checks and various bug fixes in the scan scheduler. New Functionality…
Improving WP (WordPress) Security
It is well known that WordPress (WP) is the most popular Content Management System (CMS) on the World Wide Web. Developed with PHP, and powered by mySQL databases, WordPress is used by an astonishing 8.5% of all websites. Web delivered malware and website cracking are…