Security Checks

• Security Checks
  • How Invicti reports vulnerabilities
    • Apache Struts RCE
    • Code Evaluation
    • Command Injection (CI)
    • Cross Site Scripting (XSS)
    • File Inclusion
    • Header Injection
    • NoSQL Injection
    • Server-Side Request Forgery (SSRF)
    • SQL Injection
    • Static Resources
    • XML External Entity (XXE)
    • Arbitrary Files (IAST)
    • BREACH Attack
    • Configuration Analyzer (IAST)
    • Content Security Policy
    • Content-Type Sniffing
    • Cookie
    • Cross Frame Options Security
    • Cross-Origin Resource Sharing (CORS)
    • Cross-Site Request Forgery
    • Drupal Remote Code Execution
    • Expression Language Injection
    • File Upload
    • GraphQL Library Detection
    • Header Analyzer
    • Heartbleed
    • HSTS
    • HTML Content
    • HTTP Methods
    • HTTP Status
    • HTTP.sys (CVE-2015-1635)
    • IFrame Security
    • Insecure JSONP Endpoint
    • Insecure Reflected Content
    • JavaScript Libraries
    • JSON Web Token
    • Login Page Identifier
    • Malware Analyzer
    • Mixed Content
    • Open Redirection
    • Oracle WebLogic Remote Code Execution
    • Referrer Policy
    • Reflected File Download
    • Signatures
    • Software Composition Analysis (SCA)
    • SSL
    • Unicode Transformation (Best-Fit Mapping)
    • WAF Identifier
    • Web App Fingerprint
    • Web Cache Deception
    • WebDAV
    • Windows Short Filename
  • Identifying MongoDB injection vulnerabilities
  • Identifying sensitive data
  • Security Checks
  • BREACH Attack
    • How to Disable the BREACH Attack Security Check in Invicti Enterprise
    • How to Disable the BREACH Attack Security Check in Invicti Standard
  • Forced Browsing
  • Login Page Identifier
  • Malware Analyzer
    • How to Configure the Malware Analyzer in Invicti Enterprise
  • WAF Identifier
    • How to Disable the WAF Identifier Security Check in Invicti Enterprise
    • How to Disable the WAF Identifier Security Check in Invicti Standard
  • Custom Scripts for Security Checks
    • Deciding Which Vulnerability Type Will be Detected
    • Identifying a Sample Vulnerable Web Page
  • Custom Scripts for Security Checks in Invicti Enterprise
    • Executing a custom script on a web page
    • Scanning a website with a custom security script
  • Custom Security Checks via Scripting
    • Active Security Checks
    • Passive Security Checks
    • Singular Security Checks
    • Per-Directory Security Checks
    • Helper Functions
    • How can I add Custom Fields to a Vulnerability?
  • GraphQL Library Detection