A new vision, a new beta, and a new beginning...
It's quite hard to work on something really good, something that you are proud of and not telling anyone. Now we are over that stage and our new beta has reached more than a hundred people... Our...
View ArticleWe solved our name "Dilemma"
Our web application security scanner was code-named "Dilemma". It was a lovely name but we had to separate our ways. "Netsparker" is the new name. When you download the latest beta, you'll see lots of...
View ArticleThe Final Beta!
I don't even want to write how much we coded in the last month, (actually it's illegal to work that much, so I'm not going to give you any numbers!). It was worth it though. The latest version of...
View ArticleOWASP AppSec DC 2009
Next week I'll be speaking at AppSec 2009 in Washington DC about "One Click Ownage". This is a very practical way to get a reverse shell, reverse VNC or something like that. Basically after you find an...
View ArticleIstSec 2009
After AppSec DC in Washington DC, this time we are going to IstSec 2009 in Istanbul. IstSec is potentially the biggest security conference in Turkey. Mavituna Security is one of the conference sponsors...
View ArticleNetsparker Videos
Product Tour and some feature based videos: Product Tour Simple Scan Getting a Reverse Shell LFI (Local File Inclusion) Exploitation
View ArticleFalse Positive Free Scanning
When I tell someone that Netsparker is “False Positive Free”, they’ll stare at me and think “Well, yet another lunatic!” They never actually said that but I can read it from their faces. They won’t say...
View ArticleMonthly Round-Up
We officially released and started to sell Netsparker, I forgot to mention in here! Jason Haddix of Security Aegis interviewed with me about Netsparker for The Ethical Hacker Network : Interview:...
View ArticleNetsparker New Release v1.1.2.3
We released a new version of Netsparker, mostly improvements and bug fixes. Use “Help > Check Updates” to get the latest version. What’s new? Encoder We added a new panel called “Encoder” which...
View ArticleCustom Reporting API
I’ll try to write a new tip or tutorial every week in here. Let’s start with Netsparker’s custom reporting API. How does it work? During the startup of Netsparker, it scans for C# code files (*.cs) in...
View ArticleIntegrating Netsparker with your WAF
Denim Group has released Vulnerability Manager, in their own words: Denim Group's Vulnerability Manager allows security teams to import and consolidate application-level vulnerabilities, automatically...
View ArticleNetsparker - "Automate That" Release v1.1.5.0057
Netsparker’s new “Automate That” [1] release is ready. It’s not just about bug fixes or improvements, we’ve also got two great new features and two big improvements. Command Line Support to automate...
View ArticleNetsparker - "Smart Casual" Release v1.1.5.89
Apparently we are much better at writing code than writing blog posts! We have released v1.1.5.0089, 2 days ago. This is a small update, especially addresses some minor bugs and lack of software...
View ArticleNetsparker, Accuracy and Time Costs of Web Application Security Scanner Report
Ha.ckers blog published Larry’s new report: “Accuracy and Time Costs of Web Application Security Scanner Report”. Unfortunately Larry never contacted us so we didn’t know that he was doing such a test....
View ArticleMonthly Round-Up, February
It was a good month, here is a quick overview: We have a Demo Request page now. We released two new versions (v1.1.2.3 and v1.1.5.0057) with bunch of new features and fixes. Talked about Custom...
View ArticleNetsparker 1.3.0.0 - "All you can scan" Release
We've been frantically working on the new version of Netsparker. We addressed lots of minor issues, added some new features, improved many of the engines but most importantly fixed all memory related...
View ArticleThe Academy Pro Contest
The Academy Pro Contest We are giving away one Netsparker Professional license to The Academy Pro Contest, see the details.
View ArticleNetsparker Community Edition - Free web app scanner is out!
Big news for us, our customers and the whole security community… Netsparker® Free Community Edition Mavituna Security Ltd is proud to announce the release of Netsparker Community Edition. Netsparker...
View ArticleNetsparker and Apache.org - JIRA incident
Apparently by exploiting a Cross-site Scripting vulnerability some attackers gained access to users' passwords in Apache.org and JIRA (some passwords in JIRA were plain-text). Today when I hear the...
View ArticleNetsparker v1.3.7.38 Release
Lots of improvements in Permanent XSS, XSS and SQL Injection engines. We added experimental Second Order SQL Injection support as well. There were some issues regarding to Proxy and Proxy...
View Article