Targeted Pineapple Setup (7 easy steps to gather credentials onsite)

The WiFi Pineapple Tetra is a wireless auditing tool from Hak5 that simplifies and automates the process of performing many wireless attacks.

Are You Ready for Your Pen Test?

  It is day three of a five-day penetration test engagement and we still don’t have all the information we need to proceed with the test.

Red Teaming – Not What You May Have Thought

I’ve been doing a lot of reading on some less technical topics and I ran across “Red Team: How to Succeed By Thinking Like the Enemy” by Micah Zenko.

Introduction to Metasploit Webcast

Whether you’re goal is to become a commercial penetration tester, to demonstrate the risk of a vulnerability, or just need to identify certain weaknesses..

Practical Pentest Advice from PCI

The PCI Security Standards Council released a Penetration Testing Guidance information supplement in March 2015.

What Do You Expect From A PenTest?

There are many reasons that a company has a penetration test performed.  Due to regulatory compliance, like HIPAA, or they are just take security seriously

Intercepting DNS

Recently during a penetration test, I discovered a Linksys WRT54G wireless router that had been installed on a customer’s network.

SIAM: Custom Testing Machines

Secure Ideas recently made the decision to create custom machines that we could use for penetration testing engagements.

Preparing for a Consultant

As security consultants, we regularly travel to clients’ sites and experience a wide range of environments and atmospheres.

Brute Forcing the Change Password Feature

As a penetration tester, brute force attacks are something I test for on every application.