Embedded Objects Node

Embedded objects, such as Flash files or ActiveX components, are created separately and then placed into your web application.

Since they work independently and are self-contained, any vulnerability in their codes would allow cybercriminals to infiltrate a website. By exploiting this vulnerability, attackers could try to obtain sensitive information such as CSRF tokens. In 2017, for example, at least 63 vulnerabilities were identified in Adobe Flash.

During scanning, Invicti identifies all embedded objects such as Flash objects in the target web application and lists them with their location while the target web application is being scanned.

Once the scan is completed, all embedded objects are listed under the Embedded Objects node in the Knowledge Base, highlighted in red and bold. You can access the same information in the Knowledge Base Report and Knowledge Base Tab.

Invicti forms Knowledge Base Nodes on its findings. If the Embedded Objects node is not listed, it means that Invicti did not find any.

For further information, see Knowledge Base Nodes.

How to View the Embedded Objects Node in Invicti Enterprise

1. Log in to Invicti Enterprise.
2. From the main menu, click Scans, then Recent Scans. The Recent Scans window is displayed.
3. Next to the relevant website, click Report.
4. From the Technical Report section, click the Knowledge Base tab.
5. Click the Embedded Objects node. The information is displayed in an Embedded Objects tab.

How to View the Embedded Objects Node in Invicti Standard

1. Open Invicti Standard
2. Start a Scan or open a previously saved scan.
3. The Knowledge Base is displayed on the right of the Scan Summary Dashboard. (If it is hidden, display it again using the Knowledge Base icon on the View tab on the ribbon. Alternatively, click the Reset Layout icon on the View tab, then close the Activity/Progress/Logs panes to give maximum viewing space.)

4. Ensure that the Knowledge Base Viewer is also displayed. (If it is hidden, you can display it again using the Knowledge Base Viewer button on the View tab. You may also want to close the Activity/Progress/Logs panes.)
5. Click the Embedded Objects node in the Knowledge Base. All detected Embedded Objects are displayed in the Knowledge Base Viewer.