Offensity continuously checks the customers'​ externally accessible IT systems for vulnerabilities, evaluates their risks & provides actionable recommendations.

Vienna, Austria
Joined November 2017
Dear parents, we are somewhat sorry to announce that our colleague Manuel found a way for your kids to easily get around the Screen Time PIN protection. It also seems, that Apple is not in a rush to fix this issue. Learn more about how he did it here: manuel.reinsperger.org/blog/…
2
1
6
405
If you are not sure why you should use a SAAS vulnerability scanner like Offensity, we just asked ChatGPT for the benefits of using Offensity, and we like the answer ;)
1
3
We have a new payment method available for Offensity Professional: offensity.com/en/blog/card-p…
Authenticated persistent XSS in Liferay DXP CMS (CVE-2022-38901 and CVE-2022-38902) offensity.com/en/blog/authen…
2
Wer darf bei Europas größter #Fachmesse für #IT-#Sicherheit nicht fehlen? Wir – und Sie natürlich. Sichern Sie sich also jetzt Ihr kostenloses Ticket und besuchen Sie uns auf unserem #Messestand auf der it-sa 2022 in #Nürnberg: a1.digital/de/events/it-sa-2… Wir freuen uns auf Sie!
Authenticated Insecure Direct Object Reference in Kentico CMS (CVE-2022-29287) CVSS 4.9 Credits to @stiefel40k offensity.com/en/blog/authen…
1
2
exe-files with broad write-permissions on #SMB #shares might be overwritten by #attackers to gain higher privileges in a #windowsdomain. #OffensityPrime crawls SMB shares and notifies you if sensitive files are found. #cybersecurity #vulnscans #adsecurity #privilegeescalation
2
Genesys iWD Manager Authenticated SQL injection (CVE-2021-40860 and CVE-2021-40861) CVSS 8.7 Credits to @stiefel40k offensity.com/en/blog/authen…
Replying to @0x3e4
We love it for #ntlmrelay :-)
2
Active Directory integrated DNS allows "Authenticated Users" to create new DNS A-records, even wildcards. This is crazy. Attackers could create *.lab.local #OffensityPrime rates this as a high issue. #adsecurity #activedirectory #cybersecurity #pentesting
1
7
4
Does anyone have an overview about his AD security? Just started our closed alpha phase for Offensity Prime. Here's a short preview. (and there will be a free version) #cybersecurity #adsecurity #vulnerabilityscan #offensityprime
1
3
@pdnuclei is free. And great. But a different use case.
Replying to @0xLupin @pdnuclei
Great idea, we'll add this to our feature requests.
1
We fully integrated @pdnuclei into Offensity Free. Running full port scans, crawler, web tech detection and depending on the technology, nuclei templates are executed. #websecurity #cybersecurity #vulnscanner #offensity
2
12
57
We released a number of features like on-demand scanning, custom scanning intervals and scan settings. What scan settings are you missing?
1
We just released Offensity Free including our full scanning capabilities. offensity.com/en/pricing/
3
3
Leergut-Rabatt: Wie man Pfandbons fälschen kann offensity.com/de/blog/leergu…
1
3
Apache #PathTraversal (CVE-2021-41773) was checked for all of our customers. Offensity users can also check their Apache versions manually at reporting.offensity.com/repo…
1
1