Penetration Testing Archives - Attack Surface Management Solutions

CVE-2024-21733 Apache Tomcat HTTP Request Smuggling

Our security research team recently discovered a critical “0day” vulnerability which was assigned CVE-2024-21733. The vulnerability was discovered by xer0dayz from Sn1perSecurity LLC and allows attackers to force a victim’s browser to de-synchronize its connection with websites hosted on top of Apache Tomcat, causing sensitive data to be smuggled from the server and/or client connections. In some cases, this can leak sensitive data such as clear-text credentials.

Severity: CRITICAL | Exploit Available: Yes | Exploitability: Easy | Remotely Exploitable: Yes

(more…)

January 21, 2024 xer0dayz Attack Surface Management, Bug Bounties, CVE's, News, Penetration Testing, Threat Intelligence No comments yet

Automated Penetration Testing with Sn1per Enterprise

Automated Penetration Testing Guide – Your Ultimate Resource

In today’s digital landscape, cybersecurity plays a crucial role in protecting sensitive information. One effective method to bolster your security measures is through automated penetration testing. In this comprehensive guide, we will explore the world of automated penetration testing, its numerous benefits, and how it can become your ultimate resource for safeguarding your digital assets.

(more…)

June 14, 2023 xer0dayz Attack Surface Management, Penetration Testing, Red Team, Uncategorized, Vulnerability Scanning No comments yet

Dark Web Monitoring: Securing Your External Attack Surface

In today’s digital era, data breaches and cyber-attacks are increasing day by day, and with the increasing amount of data being stored and transmitted online, the threat is real. Hackers and cybercriminals are constantly looking for vulnerabilities to exploit in your organization’s system. With the advent of the dark web, a new type of marketplace for hackers has emerged. Here, they can buy and sell stolen data, tools, and services, making it even easier for them to launch an attack. In this article, we will discuss what dark web monitoring is and how it can help secure your external attack surface.

(more…)

May 4, 2023 xer0dayz Attack Surface Management, Dark Web Monitoring, Penetration Testing, Threat Intelligence No comments yet

Sn1per: The Next Generation of Tools for Security Professionals

In the past few years, we have seen a dramatic increase in the number of tools available to security professionals. This is a direct result of the increased demand for security services, as companies of all sizes recognize the importance of securing their networks and data. With so many tools on the market, it can be difficult to know which ones are worth your time and money. That’s why we’re excited to showcase Sn1per, the next generation of tools for security professionals.

(more…)

January 20, 2023 xer0dayz Attack Surface Management, Bug Bounties, Penetration Testing, Red Team, Vulnerability Scanning No comments yet

External Attack Surface Management with Sn1per Enterprise

Attack Surface Management Platform – Enhancing Your Security

In today’s rapidly evolving digital landscape, ensuring the security of your organization’s data and infrastructure is of utmost importance. With the increasing number of cyber threats and vulnerabilities, it has become essential for businesses to proactively manage their attack surface. This is where an Attack Surface Management (ASM) platform comes into play. In this article, we will explore how an ASM platform can enhance your security and protect your valuable assets.

(more…)