In this 6 part series on SQLi (SQL Injection) we shall be describing the vulnerability and its variants, showing how it works and what an attacker can do with it. SQL injection (SQLi) refers to an injection attack wherein an attacker can execute malicious SQL…
Invicti Port Scanner
The Invicti Port Scanner performs a port scan against the server hosting the scanned website. When open ports are found, Invicti Web Vulnerability Scanner will proceed with network level security checks against the network service running on that port, such as DNS Open Recursion tests,…
South African cyber crimes bill released, includes 25 year sentencing
South Africa is the latest country taking measures to tighten up on cyber crime. In the draft of their Cybercrimes and Cyber Security bill, are included explicit penalties for cyber crimes, ranging from fines to a maximum of 25 years in prison. The draft includes…
In the headlines: South Korea’s cyber attacks, DHS networks, Adobe Shockwave Player and more
South Korea has had over 110,000 cyber attacks in the last 5 years A recently released report has revealed that South Korean government agencies were subject to over 114,000 cyber attacks in the last five years. The report, compiled using data from the National Computing…
Invicti 10 new build checks for vulnerabilities in Composer, Zend Framework, AjaxControlToolkit
Invicti WVS v.10 (build 20150921) has been released. This new build checks for Cross Site Scripting in mobile-touch event handlers and for various vulnerabilities in products such as Composer, Zend Framework, AjaxControlToolkit and others. Below is a full list of updates. New Features Added a…
XSS in Google Feedburner
A fundamental aspect of web applications which developers should bear in mind is securing the input inserted by the user. Many times, due to lack of attention or understanding, programmers might ignore the review of the code, resulting in security breaches, which through exploiting represent…
Webinar: Grow your business with Invicti
Comguard, the Invicti distributor for UAE, is organising a Webinar together with the Invicti Support Team for Invicti Partners or for IT firms interested in becoming Invicti Partner Program members. The webinar will highlight the USPs of the product and will give tips on generating sales. …
In the headlines: FireEye and Kaspersky vulnerabilities, Windows 10 ‘Keylogger’ and more
Windows 10 ‘Keylogger’ and how to switch it off When the first Windows 10 preview was released, there were reports of it containing a keylogger. It now appears that this feature did indeed make it into the released version, via the Windows helper Cortana. As…
Cross-site Scripting and its variants explained
Cross-site Scripting (XSS) has been making the Top 5 list of exploitable vulnerabilities since it was first discovered way back in the 1990s. The term XSS refers to a client-side code injection attack wherein an attacker can execute malicious scripts into a legitimate website or…