XSpider is a vulnerability scanner for seeing the real state of security on your IT infrastructure. Quickly and precisely enumerate your network components, scan network resources for vulnerabilities, and get recommendations for remediation.
Overview
How it works
Discovers network hosts
Workstations, servers, and network equipment appear in your inventory. Scanning includes both the local network and external perimeter. No endpoint agent is required for full functionality.
Scans TCP and UDP ports
Manual configuration can specify scanning of frequently used ports for maximum speed.
Detects services
Services on random ports are fully identified. XSpider detects main services (RDP, FTP, SSH) and collects core information: OS version, computer name, and installed software.
Finds vulnerabilities
Safe inventory and banner checks, combined with fuzzing, point out any network vulnerabilities.
Bruteforces passwords
Diverse protocols are supported, including those used for email, remote connections, file transfer, and databases.
Analyzes web applications
XSpider checks for vulnerabilities involving SQL injection, execution of arbitrary programs, file upload, cross-site scripting (XSS), and TTP response splitting. Custom-developed web apps are analyzed as well.
Informs of threats
For every detected vulnerability, XSpider provides a full description, recommendations, links to public sources, and CVSS (v2 and v3) Base + Temporal scores.
Generates reports
Scan results are delivered in structured form. Filter data, compare results between scans, and assess the overall security level.
Automates monitoring
XSpider can power the whole vulnerability detection process: set scan tasks to start automatically at a time of your choice. No longer do you have to manually check each component individually.
Benefits
Resources
►