Educause Security Discussion mailing list archives

Summary Report :: Dorkbot Service [JAN 2019-01]


From: Cam Beasley <cam () UTEXAS EDU>
Date: Mon, 4 Feb 2019 07:51:50 -0600

hello all —

i wanted to share summary stats from the Dorkbot web application security service for the past month.

Dorkbot covers 82% of all R1 campuses in the US and many of the top universities across 6 continents.
This month Dorkbot reached 800 subscribed entities.

[month = JAN 2019]

total campuses subscribed = 802 (+60 campuses compared to previous month)

——————
verified XSS vulnerable pages = 2,728 (+11% compared to previous month)
verified SQLi vulnerable pages = 318 (+31% compared to previous month)
verified LFI vulnerable pages =  29 (-3% compared to previous month)
verified OSi vulnerable pages =  3 (+200% compared to previous month)
verified RFI vulnerable pages =  2 (-50% compared to previous month) 
——————

3,080 total verified vulnerable pages (+13% compared to previous month) 

++++++++++++++++++++++
% of vulnerability breakdown by campus classification
++++++++++++++++++++++

47% - R1 Campuses
25% - Universities in Other Countries
10% - R2 Campuses
04% - M1 Campuses
03% - Baccalaureate Colleges: Arts & Sciences Focus
02% - R3 Campuses
02% - Universities in Canada
02% - State Agencies
05% - All Other Entities

++++++++++++++++++++++

signing up is fast & free. 
please see the following for more information:

https://security.utexas.edu/dorkbot

thanks,

~cam.




--
Cam Beasley
Chief Information Security Officer
Information Security Office
The University of Texas at Austin
security () utexas edu | 512.475.9242
http://security.utexas.edu
=======================================

Attachment: smime.p7s
Description:


Current thread: