Building a Dedicated Web App & API Pentesting Lab
Learn how to build a dedicated web app and API pentesting lab using Docker, explore various vulnerable applications, and enhance your penetration testing skills.
Creating an Encrypted File Container with LUKS
LUKS (Linux Unified Key Setup) provides disk encryption that is considered to be the standard for Linux-based systems. This article will cover the basics of how to create an encrypted file container for use on a Linux system.
Paths to Power in Active Directory Part 6: ESC8 – The Coerced Crown
Explore the risks of privilege escalation in Active Directory through certificate manipulation, highlighting the ESC6 attack path and its implications for security.
No Hash? No Problem! – ASERepCatcher
Learn how to capture and crack Kerberos authentication traffic with ASRepCatcher, a powerful tool for internal penetration testing and credential interception.
What Is a SIAM and Why Is One Showing Up at Your Office?
Discover how the Secure Ideas Attack Machine (SIAM) simplifies internal penetration testing, ensuring security without the need for onsite consultants.
Paths to Power in Active Directory Part 5: ESC6 – Under a False Sigil
Explore the risks of privilege escalation in Active Directory through certificate manipulation, highlighting the ESC6 attack path and its implications for security.
Beyond the Browser: The Questions That Expanded the Attack Surface
Explore how emerging attack vectors like PDF forms in Outlook’s preview pane can exploit trusted environments, challenging traditional security assumptions.
What factors impact the cost of a web application penetration test?
This article describes the main factors we take into account when estimating the cost of a web application penetration test.
What factors impact the cost of an API or microservice penetration test?
This article describes the main factors we take into account when estimating the cost of an API penetration test.
What factors impact the cost of an internal penetration test?
This article describes the main factors that we take into consideration while estimating the cost of an internal penetration test.