In the world of cybersecurity, it’s important to constantly be on the lookout for new threats. One way to do this is by keeping an eye on your organization’s external attack surface. Your external attack surface is the sum total of all the ways a hacker could potentially gain access to your systems—and it’s always changing. That’s why external attack surface management is so important. By monitoring your external attack surface and making sure it’s as secure as possible, you can help protect your organization from a wide range of cyber threats.
All posts by xer0dayz
Attack Surface Management Solutions | Sn1perSecurity LLC
Sn1per Scan Engine v10.2 Released!
Sn1per SE (Scan Engine) v10.2 is now available with a ton of new features and improvements. This update is part of the Sn1per SE development branch which is available to Sn1per Professional v10.0 and Sn1per Enterprise customers. If you are a previous customer (ie. Sn1per Professional v9.0 or less) or if you use the Community Edition available on Github, you will need to purchase a Sn1per Professional v10.0 license to download and receive updates.
Confluence RCE via OGNL template injection (CVE-2022-26134)
A critical vulnerability affecting the Atlassian Confluence was disclosed and designated CVE-2022-26134 which allows an un-authenticated attacker to execute arbitrary code on vulnerable servers. A number of Proof-of-Concept (PoC) exploits were published online and exploit activity is actively being observed. Given the impact and severity of the vulnerability, Sn1perSecurity has released an out-of-band update to help detect vulnerable servers in your environment using Sn1per Professional and Sn1per Enterprise.
Severity: CRITICAL | Exploit Available: Yes | Exploitability: Easy | Remotely Exploitable: Yes
Sn1per Enterprise Released!
After 2 years of active development, we are proud to share the release of Sn1per Enterprise – our enterprise Attack Surface Management (ASM) and offensive security platform. Our Enterprise edition improves overall performance and scalability and provides a new reporting interface with many cutting edge features. In this blog post, we will cover the major features of our new Enterprise edition.
BIG-IP iControl REST RCE (CVE-2022-1388) Detection with Sn1per Professional
A critical vulnerability affecting the F5 BIG-IP devices was disclosed and designated CVE-2022-1388 which allows an un-authenticated attacker to execute arbitrary code on vulnerable servers. A number of Proof-of-Concept (PoC) exploits were published online and exploit activity is actively being observed. Given the impact and severity of the vulnerability, Sn1perSecurity has released an out-of-band update to help detect vulnerable servers in your environment using Sn1per Professional.
Severity: CRITICAL | Exploit Available: Yes | Exploitability: Easy | Remotely Exploitable: Yes
Products
-
Sn1per Enterprise
$1,899.00
-
Sn1per Professional
$984.00