Summary Report :: Dorkbot Service [MAY 2019-05]

[Cam Beasley <cam () UTEXAS EDU>]

hello all —

i wanted to share summary stats from the Dorkbot web application security service for the past month.

Dorkbot covers 87% of all R1 campuses in the US and many of the top universities across 6 continents (and 78 countries).

[month = MAY 2019]

total campuses subscribed = 1,030 (+29 campuses compared to previous month)

——————
verified XSS vulnerable pages = 3,032 (+14% compared to previous month)
verified SQLi vulnerable pages = 365 (+10% compared to previous month)
verified LFI vulnerable pages = 20 (-20% compared to previous month)
verified OSi vulnerable pages = 15 (+50% compared to previous month)
verified RFI vulnerable pages = 04 (+100% compared to previous month) 
——————

3,143 total verified vulnerable pages (+4% compared to previous month)  

++++++++++++++++++++++
% of vulnerability breakdown by campus classification
++++++++++++++++++++++

44% - Universities in Other Countries
19% - R1 Universities
07% - R2 Universities
05% - Higher Ed Consortiums
04% - M1 Universities
04% - Baccalaureate Colleges: Arts & Sciences Focus
03% - State Agencies
02% - D/PU Universities
02% - Universities in Canada
06% - All Other Entities

++++++++++++++++++++++

signing up for Dorkbot is fast & free. 
you will receive realtime alerts for any verified vulnerabilities along with a custom monthly report.

please see the following for more information:

    https://security.utexas.edu/dorkbot

    https://er.educause.edu/blogs/2019/2/dorkbot-a-managed-application-security-assessment-service-for-higher-education

please note that many smaller campuses in your area may not be as well connected to this community. 
feel free to share the signup page with any such campuses you might be associated that could benefit from this service.

thanks,

~cam.



--
Cam Beasley
Chief Information Security Officer
Information Security Office
The University of Texas at Austin
security () utexas edu | 512.475.9242
http://security.utexas.edu
=======================================

Attachment: smime.p7s
Description: