We're leaving X 😢
You still find us at LinkedIn and in our GitHub Discussions. See you there. 💚
You still find us at LinkedIn and in our GitHub Discussions. See you there. 💚
SysReptor
@SysReptor
#Pentest #Reporting made easy: Design in HTML, Write in Markdown, Render to PDF. Self-hosted or Cloud.
For Pentesters. By Pentesters. 💚
For Pentesters. By Pentesters. 💚
97 Following 560 Followers 447 Posts
Latest posts 5
🛡️Time for a SysReptor update!
🥳 We've got a great security review and hardening time behind us.
The today's SysReptor release brings several security hardening measures and fixed a minor "user admin" to "superuser" privilege escalation that is exploitable in non-default... 1/n
🥳 We've got a great security review and hardening time behind us.
The today's SysReptor release brings several security hardening measures and fixed a minor "user admin" to "superuser" privilege escalation that is exploitable in non-default... 1/n
The inline image editor can now also blur sensitive parts of images. And the best thing is...
...it takes the color values from the edge of the rectangle, so it is impossible to reconstruct the images behind the blur.
"Secure blurring" so to say.
...it takes the color values from the edge of the rectangle, so it is impossible to reconstruct the images behind the blur.
"Secure blurring" so to say.
🛡️Time to update SysReptor Professional
We fixed a security issue: Read-write access to personal notes by sharing-link creation with no authorization
SysReptor Community is also affected, but access to personal notes of other users is intended there (because everyone is superuser).
Thank you to Robin L. for reporting ❤️
github.com/Syslifters/sys…
We fixed a security issue: Read-write access to personal notes by sharing-link creation with no authorization
SysReptor Community is also affected, but access to personal notes of other users is intended there (because everyone is superuser).
Thank you to Robin L. for reporting ❤️
github.com/Syslifters/sys…
github.com Read-write access to personal notes by sharing-link creation with no authorization in SysReptor... ## Impact The endpoints for reading and creating sharing links for personal notes are not properly authorized. This allows authenticated attackers who obtain the note ID of victim users to list ... ☑️ Multi-select and bulk actions
In the latest SysReptor version you can multi-select projects and run bulk-actions on them.
The same is possible for finding templates and designs.
In the latest SysReptor version you can multi-select projects and run bulk-actions on them.
The same is possible for finding templates and designs.
