Rapid7 InsightAppSec

No entries match these filters. Clear filters

1. docs update Sep 9, 2026 · issue 069

   InsightAppSec 7.5.029 adds AWS Bedrock LDAP InjectionLDAP InjectionAn attack technique where unsanitized user input is embedded into LDAP queries, manipulating directory lookups to bypass authentication or extract data. Tools use it to test directory services for input-validation flaws. AI validation, FP transparency logging, and ALF v2.1.1 with native OTPOTPOne-time password: a short-lived numeric or alphanumeric code valid for a single authentication attempt, generated via TOTP or HOTP standards, giving cyber tools phishing-resistant second-factor verification without stored shared secrets. support.

   • Adds AWS Bedrock LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. verification for LDAPLDAPA protocol for querying and modifying directory services, standardized under RFC 4511, commonly used to look up users, groups, and attributes in corporate identity stores like Active Directory. Injection findings to the AI Vulnerability Validator, joining existing Blind SQL, Blind NoSQL, SQL Injection, and RFI validation models to automatically filter false positives.
   • Enables automated generation of assessment log and report artifacts when the AI Vulnerability Validator is active, documenting every finding flagged as a false positive and excluded from scan results.
   • Upgrades the Application Layer Framework (ALF) to v2.1.1, introducing native One-Time Password (OTP) support without manual hook setups, expanded ALF logging visibility, and optimized default configuration parameters.
   • Technology Detection vulnerability findings now include Detection Method and Match Details telemetry forwarded directly from R7Crawler.
   • Introduces per-URL failure tracking and configurable controls to block repeatedly failing URLs from stalling engine runs.
   • Enables automated generation of assessment log and report artifacts when the AI Vulnerability Validator is active, documenting every finding flagged as a false positive and excluded from scan results.

   4 more in Everything

2. docs update Aug 4, 2026 · issue 035

   InsightAppSec 7.5.028 adds OOB Host Header Injection detection, AI-powered SQL injectionSQL injectionAn attack that makes an application treat untrusted input as part of a database command. It can expose or modify data by changing what the query does. and RFI validation, and Windows implicit authentication for Chromium scans.

   • New Out-of-Band attack module detects DNS Redirect vulnerabilities by injecting callback domains into Host, X-Forwarded-Host, X-Host, X-Forwarded-Server, and RFC 7239 Forwarded headers, with raw socket delivery to bypass WinInet constraints; DNS-only evidence findings are assigned Medium confidence.
   • AI Vulnerability Validator for SQL Injection uses AWS Bedrock LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. to automatically assess and validate SQL Injection findings, filtering false positives before reporting.
   • AI Vulnerability Validator for Remote File Inclusion uses AWS Bedrock to confirm successful exploitation prior to reporting, eliminating false positives from unexploited payload reflections.
   • Adds NTLMNTLMA Windows authentication protocol that proves knowledge of a password through a challenge and response. Captured authentication exchanges can be abused in relay attacks when protections are absent., KerberosKerberosA network authentication protocol that uses tickets issued by a trusted service. Users and services can prove their identities without sending a password to each application., and Negotiate authentication support for Chromium-based scans accessing internal targets using default Windows credentials.
   • Dynamic Memory Management introduces dynamic memory caching controls within the Scan Engine to optimize resource allocation and prevent scan failures from insufficient memory.

   +2 more show less

   • LLM Shadow DOMDOMThe browser's in-memory tree representation of a web page's structure, standardized by the W3C, giving cyber tools a programmable interface to read or manipulate page content at runtime. Analysis upgrades response extraction routines to capture Shadow DOM content during LLM security evaluations.
   • R7 Crawler enhances loggedInHeaderRegex evaluation logic to inspect service worker network traffic, improving logged-in state detection coverage.

   7 details in Everything