All Resources

Library

Explore our collection of resources, including blog articles, webcasts, and case studies.

All Resources

Never had a bad day phishing. How to set up GoPhish to evade security controls.
Jun 30, 2021

Never had a bad day phishing. How to set up GoPhish to evade security controls.

I’m going to quickly go through the process of setting up GoPhish and show you how we evade defenders to increase the success rate of our phishing campaigns.
Fourteen good reasons to require 14-character passwords
Jun 15, 2021

Fourteen good reasons to require 14-character passwords

Password. Password123. Yea, you’ve seen them all when it comes to bad passwords. It comes standard when managing IT security. But while your organization likely requires special characters, uppercase letters and even a number or two, if you don’t require longer passwords you’re not taking one of the most important steps to protect your network.
What Is an Attack Surface... and Why Protect It?
May 03, 2021

What Is an Attack Surface... and Why Protect It?

Maybe you’ve heard your IT security team talking about attack surfaces? Or, maybe the term has come up during a virtual conference or in your newsfeed. It’s important to take a step back and understand what an attack surface is and why you need to protect it.
VIDEO: How Continuous Penetration Testing Works (the best)
May 03, 2021

VIDEO: How Continuous Penetration Testing Works (the best)

Trying to wrap your head around what separates Continuous Penetration Testing from other forms of network security testing? Well, we get it. That’s why we’ve put together this handy little video. Sit back, have a snack and learn how CPT works, why it’s advantageous and how it can help you keep your organization’s network safe.
What Vulnerability Scanners Miss... and the Cost
Apr 01, 2021

What Vulnerability Scanners Miss... and the Cost

Automated Vulnerability Scanners, on the surface, have a lot of appeal to IT directors. They run in the background and are “always on”. They alert you when you have an issue. But the harsh reality is they provide a false sense of security and leave your network exposed.
Reliable Username Enumeration: A step-by-step guide
Mar 25, 2021

Reliable Username Enumeration: A step-by-step guide

Collecting and validating an organization’s employee base is critical for any successful offensive information security operation.