Cenzic Updates 3 SmartAttacks Including CSRF

In this week’s SmartAttack release, Cenzic Cenzic’s SmartAttack arsenal now has enhanced support for:

• Cross Site Request Forgery (CSRF),
• Session Fixation, and
• Web Server Vulnerabilities SmartAttack
  -  PHP FastCGI Module File Extension Denial Of Service Vulnerabilities (BugtraqID 31612)

To learn more details on how you can automatically update your Cenzic Hailstorm product, visit our Website.

Background on Cenzic’s SmartAttacks
Every week, Cenzic’s suite of products is updated with the latest vulnerabilities (custom, commercial, and open-source) to use when it emulates a hacker and attacks our customer’s Websites to detect their security posture.   These Web application vulnerabilities include (but not limited to) cross site scripting, buffer overflow, path or directory traversal, SQL injection, HTTP response splitting, and other workflow types.

by
Erin Swanson
ESwanson@cenzic.com