What Can I Expect During the Physical Penetration Testing Process?

Learn about the process of a physical penetration test, including how to prepare, the testing phase, and the results.

ZAPmas Feedback

A great introduction to ZAP that provide a very fair and balanced comparison to Burp Suite.

12 Days of ZAPmas – Day 12 Testing a new Content-Security-Policy

This final day closes out the series with a look at using ZAP to test and refine a Content-Security-Policy (without breaking your app).

Application Security 202: Vulnerabilities Accepted

Studying how to accept vulnerabilities and secure applications

How to quickly estimate the cost of a penetration test.

This article describes methods of estimating the price of a penetration test.

What is a Gray Box Penetration Test?

This article details the purpose and methodologies of gray box penetration testing.

Gray Box vs White Box vs Black Box

This article compares the following penetration testing methods: Gray Box, Black Box, White Box. It provides a comparison chart.

Linux X86 Assembly – How To Test Custom Shellcode Using a C Payload Tester

Overview In the last blog post in this series, we created a tool to make it easy to build our custom payloads and extract them. 

How is my data protected during and after penetration testing?

This article explains what guarantees are in place to protect client data

Should penetration tests be conducted outside business hours?

This article explains the benefits and downsides of testing at night.