Penetration Testing Resources

Penetration Testing

Latest Penetration Testing Resources

Pwning SPA’s With Semgrep
May 30, 2024 Nate Fair

Pwning SPA’s With Semgrep

Semgrep, or Semantic Grep (For Code) should be a part of your pentesting toolkit. If you think otherwise, read on to see why.
PCI DSS 4.0 and a Continuous Offensive Security Strategy
May 16, 2024 Greg Anderson

PCI DSS 4.0 and a Continuous Offensive Security Strategy

In the ever-evolving landscape of cybersecurity, organizations are constantly challenged to protect their sensitive data. The Payment Card Industry Data Security Standard (PCI DSS) version 4.0 is the latest iteration of security standards designed to ensure that all companies that accept, process, store, or transmit credit card information maintain a secure environment.
Zip Slip Exploitation in File Uploads with Hackvertor
May 09, 2024 Will Vandevanter

Zip Slip Exploitation in File Uploads with Hackvertor

Custom Tags are one of Hackvertor's most powerful features. They allow you to run Python, Java, or JavaScript with a one-liner inside any Burp request. In this blog post, we will discuss performing Zip Slip testing with a custom Hackvertor tag.
Directory Brute-forcing at Scale
Feb 15, 2024 Nicholas Anastasi

Directory Brute-forcing at Scale

Tools such as dirbuster, gobuster, feroxbuster, dirb, and ffuf have been instrumental in uncovering hidden content on websites. These tools and wordlists designed to discover files and directories have become staples in the toolkits of penetration testers and bug bounty hunters. Now more than ever, technology plays a vital role in cybersecurity practices.
Mergers & Acquisitions Risk Management with Continuous Offensive Security
Nov 28, 2023 Sprocket Security

Mergers & Acquisitions Risk Management with Continuous Offensive Security

Cybersecurity risks are growing exponentially, making a continuous penetration testing solution and risk evaluation necessary during a merger and acquisition transaction.
Network penetration testing: what is it and why do you need it?
Jun 08, 2023 Sprocket Security

Network penetration testing: what is it and why do you need it?

How your business will benefit from network penetration testing and why it’s important to conduct annual testing.
« 3 4 5 6 7 »