pentesting
Penetration testers can save a lot of their valuable time and even find more security vulnerabilities with little to no extra effort by just using the right tool! In this article, we will dive deep into BLACKBIRD Web App Pentesting Suite—our cloud-based web application pentesting suite for penetration testers.
web-security
Out-of-band web security vulnerabilities are generally harder to spot, especially in modern complex web applications. Most out-of-band security vulnerabilities even come with an elevated impact (such as SSRF) as they can provide unauthorized users with access to internal-only resources. In this article, we will delve into what OOB web security
web-security
Penetration testers can save a lot of their valuable time with the right tool set. Besides that, pentesters can also improve their quality of work by just working with smarter tools. Whether you're a seasoned pentester or just starting out, these tools offer a comprehensive range of features
web-security
One of the most effective ways to safeguard web applications is through the use of web vulnerability scanners. These tools are designed to identify and mitigate security flaws before they can be exploited by malicious actors. In this article, we will discuss the top 7 effective web vulnerability scanners in
web-security
Exploring Hidden Attack Surfaces is a new blog post series curated by BLACKBIRD Technologies for the community to help you on your way to discover any attack surfaces that most current tools are not capable of. Part 2 is dedicated to performing better content discovery so that you can have
web-security
Infrastructure Vulnerability Scanning is an automated process with its main aim to scan for security weaknesses and vulnerabilities within a network, system or application infrastructure. An IT infrastructure is often defined as every single running node, component or host that an organization or company uses to operate. Infrastructure Vulnerability Scanning
web-security
Exploring Hidden Attack Surfaces is a new blog post series curated by Nova Security for the community to help you on your way to discover any attack surfaces that most current tools are not capable of. Part 1 is dedicated to finding more subdomains so that you can have that
CWE-918
Server-Side Request Forgeries (SSRF) vulnerabilities arise when any kind of web service or component (like an app or API) uses your input to craft a request on behalf of the server. And this can have quite a few consequences, such as: * Make requests to any external resource on behalf of
web-security
If you've been working with software, with web & cloud services in particular. You may have heard that it is a best practice to regenerate your secrets (such as your API and encryption keys) regularly. But how often should you rotate all these credentials? It is recommended to
web-security
Why would you choose scanner XYZ over us? Good question. In this article we'll go over why you should choose us above other existing scanners. Experienced Web App Pentesters: First of all, Nova Security Scanner was developed by small team of experienced web application penetration testers. We'
web-security
One of the main differences is that On-Premise installations can cover internal networks as well but are more expensive. Whereas online or cloud-based web vulnerability scanners are only capable of reaching external services that you host but scan your web assets at a much cheaper rate. In this article, we
web-security
You probably ever had to redirect your users from your website to another third-party's site that you do not control. And because of that, you've added a function to your existing app route or endpoint that reads a (query) parameter, and redirects the user to the