Offensity

Offensity continuously checks the customers'​ externally accessible IT systems for vulnerabilities, evaluates their risks & provides actionable recommendations.

[Offensity @offensity]

Dear parents,
we are somewhat sorry to announce that our colleague Manuel found a way for your kids to easily get around the Screen Time PIN protection. It also seems, that Apple is not in a rush to fix this issue. Learn more about how he did it here:
https://t.co/8nTq6dqcpK

[Offensity @offensity]

If you are not sure why you should use a SAAS vulnerability scanner like Offensity, we just asked ChatGPT for the benefits of using Offensity, and we like the answer ;)

[Offensity @offensity]

We have a new payment method available for Offensity Professional:
https://t.co/wOSPEDld4U

[Offensity @offensity]

Authenticated persistent XSS in Liferay DXP CMS (CVE-2022-38901 and CVE-2022-38902)
https://t.co/2BF4ZQzyMc

[Offensity @offensity]

Hey Twitter,
if you like our SaaS Vulnerability Scanner please give us a review on G2.
https://t.co/hMzURT5t7e

[A1 Digital @A1__Digital]

Wer darf bei Europas größter #Fachmesse für #IT-#Sicherheit nicht fehlen? Wir – und Sie natürlich. Sichern Sie sich also jetzt Ihr kostenloses Ticket und besuchen Sie uns auf unserem #Messestand auf der it-sa 2022 in #Nürnberg: https://t.co/jyEl6Y1jqv Wir freuen uns auf Sie!

[Offensity @offensity]

Authenticated Insecure Direct Object Reference in Kentico CMS (CVE-2022-29287)
CVSS 4.9
Credits to @stiefel40k

https://t.co/KrdqQZKEu0

[Offensity @offensity]

exe-files with broad write-permissions on #SMB #shares might be overwritten by #attackers to gain higher privileges in a #windowsdomain.
#OffensityPrime crawls SMB shares and notifies you if sensitive files are found.

#cybersecurity #vulnscans #adsecurity #privilegeescalation

[Offensity @offensity]

Genesys iWD Manager Authenticated SQL injection (CVE-2021-40860 and CVE-2021-40861)
CVSS 8.7
Credits to @stiefel40k

https://t.co/5Tc6Rt9Z60

[Offensity @offensity]

@0x3e4 We love it for #ntlmrelay :-)

[Offensity @offensity]

Active Directory integrated DNS allows "Authenticated Users" to create new DNS A-records, even wildcards.
This is crazy.
Attackers could create *.lab.local
#OffensityPrime rates this as a high issue.

#adsecurity #activedirectory #cybersecurity #pentesting

[Offensity @offensity]

Does anyone have an overview about his AD security?
Just started our closed alpha phase for Offensity Prime.
Here's a short preview.

(and there will be a free version)

#cybersecurity #adsecurity #vulnerabilityscan #offensityprime

[Offensity @offensity]

@ome_mishra @pdnuclei @pdnuclei is free. And great. But a different use case.

[Offensity @offensity]

We fully integrated @pdnuclei into Offensity Free.
Running full port scans, crawler, web tech detection and depending on the technology, nuclei templates are executed.

#websecurity #cybersecurity #vulnscanner #offensity

[Offensity @offensity]

@0xLupin @pdnuclei Great idea, we'll add this to our feature requests.

[Offensity @offensity]

Offensity Free also easily detects http request smuggling attacks. @AronMolnar2 from our team explains how those attacks work.
https://t.co/yEDTQUecX5

#httpsmuggling #desync #cybersecurity #hacking

[Offensity @offensity]

We released a number of features like on-demand scanning, custom scanning intervals and scan settings.
What scan settings are you missing?

[Offensity @offensity]

We just released Offensity Free including our full scanning capabilities.
https://t.co/SMlwO0m85g

[Offensity @offensity]

Leergut-Rabatt: Wie man Pfandbons fälschen kann
https://t.co/bOipaLW80T

[Offensity @offensity]

Apache #PathTraversal (CVE-2021-41773) was checked for all of our customers.
Offensity users can also check their Apache versions manually at https://t.co/ce75PwU5M5