How to scan for MongoDB injection vulnerabilities – and how to fix them

Thu, 15 Dec 2022

NoSQL injection attacks against MongoDB databases are a major threat to full-stack JavaScript applications. Invicti security engineer Özgür Dinç shows how to find MongoDB injection vulnerabilities with Invicti’s vulnerability scanner – and how to fix them.

How to Do a Controlled Web Security Scan with Netsparker Desktop

Tue, 23 May 2017

This FAQ explains how you can use the Controlled Scan feature in Netsparker Dekstop web application security scanner to scan a specific parameter or page on a target web application once it has been crawled.

Using Selenium and Netsparker for Manual Crawling of Web Applications

Tue, 23 May 2017

This FAQ explains how you can do a manual crawl of websites with Netsparker web application security scanner from Selenium recordings, which many use to test web applications’ functionality.

Troubleshooting Inconsistent Web Security Scan Results

Tue, 23 May 2017

Read this document to understand what can be the cause of inconsistent scan results and how to troubleshoot the issue and identify what could possibly causing such a problem.

Manual Crawling with Netsparker Desktop in Proxy Mode

Tue, 23 May 2017

This FAQ explains how to manually crawl a website with a web browser and then scan it for vulnerabilities with Netsparker Desktop web application security scanner.

How Can I Ensure That The Web Vulnerability Scanner Scanned All My Website?

Thu, 21 Jul 2016

This FAQ looks into a few different methods which you can use to ensure that the coverage of the web application security scanner was good and scanned all of your websites and web applications.

Using the HTTP Request Builder to Build & Send Individual HTTP Requests

Tue, 23 May 2017

The HTTP Request Builder is a penetration testing tool that you can use to build your own HTTP requests and do manual analysis of vulnerabilities and the target’s HTTP responses. It is typically used in advanced penetration tests.

Netsparker Enterprise Built-In Reports and Reporting Tool

Tue, 23 May 2017

This post gives an overview of the built-in reports which are available in Netsparker Enterprise and also the Reporting Tool, which allows you to generate statistics reports about vulnerabilities and websites.

Finding Vulnerabilities in RESTful Web Services Automatically with a Web Security Scanner

Tue, 23 May 2017

This article explains how you can use Netsparker web application security scanner to automatically scan and find vulnerabilities in RESTful web services.

Tailoring the Web Security Scan Reports to Match Your Organization’s Security Policies

Tue, 23 May 2017

This article explains how you can use the Report Policy Editor in Netsparker Desktop to customize the scanner’s scan results and reports so they match your organization’s security policies.

What Changed in the New PCI DSS 3.2?

Wed, 01 Jun 2016

PCI DSS 3.1 is soon being superseded by the new PCI DSS 3.2. This article gives an overview of what is new and what has changed in the new version of the popular regulatory compliance requirements.

Scanning multiple websites with Netsparker Desktop using the Command Line Interface

Tue, 23 May 2017

This document explains in an easy to follow step-by-step format how to scan multiple websites for security flaws using the command line interface of Netsparker Desktop web application security scanner.

Netsparker Desktop Command Line Interface and Arguments

Fri, 25 Aug 2017

An FAQ about the command line interface of Netsparker Desktop. The FAQ also explains all the different arguments that can be used and gives some examples as well.