If you are not sure why you should use a SAAS vulnerability scanner like Offensity, we just asked ChatGPT for the benefits of using Offensity, and we like the answer ;)
exe-files with broad write-permissions on #SMB #shares might be overwritten by #attackers to gain higher privileges in a #windowsdomain.
#OffensityPrime crawls SMB shares and notifies you if sensitive files are found.
#cybersecurity #vulnscans #adsecurity #privilegeescalation
Genesys iWD Manager Authenticated SQL injection (CVE-2021-40860 and CVE-2021-40861)
CVSS 8.7
Credits to @stiefel40k
offensity.com/en/blog/authen…
Active Directory integrated DNS allows "Authenticated Users" to create new DNS A-records, even wildcards.
This is crazy.
Attackers could create *.lab.local
#OffensityPrime rates this as a high issue.
#adsecurity #activedirectory #cybersecurity #pentesting
Does anyone have an overview about his AD security?
Just started our closed alpha phase for Offensity Prime.
Here's a short preview.
(and there will be a free version)
#cybersecurity #adsecurity #vulnerabilityscan #offensityprime
Offensity Free also easily detects http request smuggling attacks. @AronMolnar2 from our team explains how those attacks work.
youtube.com/watch?v=mijOcGLn…
#httpsmuggling #desync #cybersecurity #hacking
We released a number of features like on-demand scanning, custom scanning intervals and scan settings.
What scan settings are you missing?
Apache #PathTraversal (CVE-2021-41773) was checked for all of our customers.
Offensity users can also check their Apache versions manually at reporting.offensity.com/repo…
"How Red Bull deals with cyber threats"
We are proud that we were able to win Red Bull to host a webinar on vulnerability management together with us. (german language)
Sign up at a1.digital/ueber-a1-digital/…
Wie viel Security-Budget sollte ein KMU eigentlich haben? Eine Möglichkeit beschreiben wir in unserem Blog offensity.com/de/blog/wie-gr…








