{"id":22644,"date":"2023-05-29T15:15:34","date_gmt":"2023-05-29T22:15:34","guid":{"rendered":"https:\/\/sn1persecurity.com\/wordpress\/?p=22644"},"modified":"2023-05-29T15:20:47","modified_gmt":"2023-05-29T22:20:47","slug":"sn1per-enterprise-v20230516-released","status":"publish","type":"post","link":"https:\/\/sn1persecurity.com\/wordpress\/sn1per-enterprise-v20230516-released\/","title":{"rendered":"Sn1per Enterprise v20230516 Released!"},"content":{"rendered":"

Sn1per Enterprise v20230516 has been released for Sn1per Enterprise<\/a> customers, introducing several new features and enhancements. In this blog post, we will delve into the details of these additions. If you’re not a Sn1per Enterprise<\/a> customer yet, now is the perfect time as we have reduced the starting price of our Enterprise plan by 40%<\/strong>. We also removed the limitations for “Max targets per workspace” and “Max workspaces”<\/strong> to give customers more flexibility over their asset allocation. Based on these changes, this is the best deal we’ve ever had for our Enterprise product. To learn more or request a quote<\/a>, please visit our shop<\/a>.<\/p>\n

<\/p>\n

Introduction of HTTP Status Indicators<\/h3>\n

To begin with, we have implemented HTTP status indicators for all web hosts. These indicators provide information about the number of endpoints discovered through active and passive spidering, as well as brute forcing for hidden files and directories. The black<\/strong> bubble indicator represents the total number of discovered endpoints, while the green<\/span> <\/strong>bubble indicator represents endpoints with a “200” status code. Red<\/span> <\/strong>indicates status codes with “401\/403 Access Denied,” and orange<\/span> <\/strong>indicates redirect status codes (e.g., 301\/302). Blue<\/span> <\/strong>indicates status codes with 50x indicating an error.<\/p>\n

\"Sn1per<\/a>
Sn1per Enterprise HTTP Status Indicators<\/figcaption><\/figure>\n

Introducing the New URLs Viewer<\/h3>\n

We are also introducing a new URLs tab in all host reports. This tab provides a visual interface to explore, sort, and export all discovered endpoints, which align with the previously mentioned HTTP status codes. Additionally, we have added quick point-and-click “Fuzz<\/strong>” actions to automatically test specific endpoints with various tools. These actions help detect OWASP Top 10 vulnerabilities like SQL injection or Cross-Site Scripting (XSS), uncover hidden content, and check for 403 bypasses on the specific endpoint selected.<\/p>\n

\"Sn1per<\/a>
Sn1per Enterprise URLs Viewer<\/figcaption><\/figure>\n

Enhanced Visual Configuration Editor<\/h3>\n

We are excited to present the new visual configuration editor shown below. This feature enables customers to easily view and customize their scan policies using our visual editor. The drop-down menus conveniently load all wordlists from the \/sniper\/wordlists\/ directory, allowing for effortless selection of wordlists and options to experiment with different combinations.<\/p>\n

\"Sn1per<\/a>
Sn1per Enterprise Configuration Editor<\/figcaption><\/figure>\n

Improved Credentials Viewer<\/h3>\n

Our credentials viewer has been enhanced to display both valid credentials discovered through HudsonRock<\/a>‘s FREE API tier and Enum4Linux, giving customers a greater range of credential discovery and detail.<\/p>\n

\"Sn1per<\/a>
Sn1per Enterprise Credentials Viewer<\/figcaption><\/figure>\n

Changelog<\/h3>\n