Skip to content
  • There are no suggestions because the search field is empty.

What are advanced vulnerability plugins?

These plugins focus on checking for specific web vulnerabilities. Due to their specialized nature, they are not part of the default assessment configuration and must be added explicitly to the profile. These plugins are designed for specific vulnerabilities and intended for users who want to perform a more detailed, targeted security assessment of their web applications. It's important to note that they are more time-consuming due to the in-depth analysis methods selected.

Here is the list of advanced vulnerability plugins:
  • HID-3-0-10184  Web Cache Poisoning (Fat Get)
  • HID-3-0-10172  HTTP Parameter Discovery
  • HID-3-0-10158  Unvalidated Host-Header in Connection State
  • HID-3-0-10156  Virtual Host Brute Forcing Using Host Header Injection
  • HID-3-0-10148  Request URL override
  • HID-3-1-00017  File Inclusion vulnerability
  • HID-3-1-10017  Persistent server-side include vulnerability
  • HID-3-0-10185  Web Cache Poisoning (Path Based)
  • HID-3-0-10183  Web Cache Poisoning (Header Based)

Add additional tests to your profile:

To include specific vulnerability tests in your profile, see this article's information under vulnerability selection.

https://support.holmsecurity.com/knowledge/what-does-the-scan-profile-settings-mean-1