In the past few years, we have seen a dramatic increase in the number of tools available to security professionals. This is a direct result of the increased demand for security services, as companies of all sizes recognize the importance of securing their networks and data. With so many tools on the market, it can be difficult to know which ones are worth your time and money. That’s why we’re excited to showcase Sn1per, the next generation of tools for security professionals.
Currently browsing: Bug Bounties
Attack Surface Management Solutions | Sn1perSecurity LLC
5 Ways Sn1per Can Automate Your Security Workflow
If you’re in the security field, you know that there are a lot of moving parts to keep track of. It can be tough to stay on top of everything, and even tougher to find the time to do it all manually. That’s where Sn1per comes in – it’s a tool that helps automate various aspects of your workflow so you can focus on other things. In this blog post, we’ll show you 5 ways Sn1per can help you save time in the process.
Confluence RCE via OGNL template injection (CVE-2022-26134)
A critical vulnerability affecting the Atlassian Confluence was disclosed and designated CVE-2022-26134 which allows an un-authenticated attacker to execute arbitrary code on vulnerable servers. A number of Proof-of-Concept (PoC) exploits were published online and exploit activity is actively being observed. Given the impact and severity of the vulnerability, Sn1perSecurity has released an out-of-band update to help detect vulnerable servers in your environment using Sn1per Professional and Sn1per Enterprise.
Severity: CRITICAL | Exploit Available: Yes | Exploitability: Easy | Remotely Exploitable: Yes
BIG-IP iControl REST RCE (CVE-2022-1388) Detection with Sn1per Professional
A critical vulnerability affecting the F5 BIG-IP devices was disclosed and designated CVE-2022-1388 which allows an un-authenticated attacker to execute arbitrary code on vulnerable servers. A number of Proof-of-Concept (PoC) exploits were published online and exploit activity is actively being observed. Given the impact and severity of the vulnerability, Sn1perSecurity has released an out-of-band update to help detect vulnerable servers in your environment using Sn1per Professional.
Severity: CRITICAL | Exploit Available: Yes | Exploitability: Easy | Remotely Exploitable: Yes
VMware Workspace ONE Access freemarker SSTI (CVE-2022-22954) Detection with Sn1per Professional
Information regarding a critical 0-day vulnerability affecting the VMware Workspace ONE Access and Identity Manager was disclosed and designated CVE-2022-22954 which allows an un-authenticated attacker to execute arbitrary code on vulnerable servers. On April 14th, CISA & US-Cert added CVE-2022-22954 to their catalog of known exploited vulnerabilities after a number of Proof-of-Concept (PoC) exploits were published online and exploit activity was actively observed. Given the impact and severity of the vulnerability, Sn1perSecurity has released an out-of-band update to help detect vulnerable servers in your environment using Sn1per Professional.
Severity: CRITICAL | Exploit Available: Yes | Exploitability: Easy | Remotely Exploitable: Yes
Products
-
Sn1per Enterprise
$1,899.00
-
Sn1per Professional
$984.00