Penetration Testing
Resources Blog

Penetration Testing

Keep up to date with the latest offensive security news, knowledge, and resources.
Exploring Modern Password Spraying: Introduction to Entra Smart Lockout
Jun 21, 2024

Exploring Modern Password Spraying: Introduction to Entra Smart Lockout

Delve into the modern techniques and security controls surrounding password spraying. This series will explore the current techniques, tactics, and procedures (TTPs) for password spraying.
Pwning SPA’s With Semgrep
May 30, 2024

Pwning SPA’s With Semgrep

Semgrep, or Semantic Grep (For Code) should be a part of your pentesting toolkit. If you think otherwise, read on to see why.
PCI DSS 4.0 and a Continuous Offensive Security Strategy
May 16, 2024

PCI DSS 4.0 and a Continuous Offensive Security Strategy

In the ever-evolving landscape of cybersecurity, organizations are constantly challenged to protect their sensitive data. The Payment Card Industry Data Security Standard (PCI DSS) version 4.0 is the latest iteration of security standards designed to ensure that all companies that accept, process, store, or transmit credit card information maintain a secure environment.
Zip Slip Exploitation in File Uploads with Hackvertor
May 09, 2024

Zip Slip Exploitation in File Uploads with Hackvertor

Custom Tags are one of Hackvertor's most powerful features. They allow you to run Python, Java, or JavaScript with a one-liner inside any Burp request. In this blog post, we will discuss performing Zip Slip testing with a custom Hackvertor tag.
Directory Brute-forcing at Scale
Feb 15, 2024

Directory Brute-forcing at Scale

Tools such as dirbuster, gobuster, feroxbuster, dirb, and ffuf have been instrumental in uncovering hidden content on websites. These tools and wordlists designed to discover files and directories have become staples in the toolkits of penetration testers and bug bounty hunters. Now more than ever, technology plays a vital role in cybersecurity practices.
Mergers & Acquisitions Risk Management with Continuous Offensive Security
Nov 28, 2023

Mergers & Acquisitions Risk Management with Continuous Offensive Security

Cybersecurity risks are growing exponentially, making a continuous penetration testing solution and risk evaluation necessary during a merger and acquisition transaction.
6 7 8 9 10