The Social Engineer’s Toolkit (SET)
Introduction Social engineering is the art of manipulating people into divulging confidential information or performing actions that they would not ordinarily do.
Author
Ben DiMolfetta
Director of Security and Risk Management, Application Security at Winmill
Beyond alert(“XSS”): Advanced Client-Side Penetration Intrusion Testing with the Browser Exploitation Framework
BeEF (Browser Exploitation Framework) is an open-source penetration intrusion testing tool that is used to test the security of web browsers.
The MITRE ATT&CK Defender Framework: Intelligence-Driven Threat Modeling
What is Threat Modeling?
Conducting Successful Penetration Testing: 7 Steps
Are you getting the most out of your pen testing program?
Application Scan Identifies an SSRF Vulnerability; Penetration Test Finds Exploitation Attack Vectors
Introduction (Pen Test vs.
Extracting Threat Information from the Apache Access Log
We will be using the Apache log file for the analysis.
Penetration Test Reveals SYSTEM Access to MSSQL Server via SQL Injection and File Overwrite
In this demonstration we will exploit an MSSQL server through a penetration test, involving a series of SQL injections, that...
Vulnerability Aggregation Tools Review: The Top 4 Tools
When it comes to penetration testing, there is no shortage of vulnerability aggregation tools including management and report generation tools.
Penetration Testing: Gaining System Admin Control in Minutes
In this penetration testing admin article, we show how easy it is to attack the Manage Engine web application, using...
Understanding the Differences between Penetration Testing and Vulnerability Scanning
Penetration testing and vulnerability scanning are two vastly different ways to check the security of your systems and infrastructure.
Cyber Attacks: 7 Reasons Why You Need Penetration Testing
If your company hasn’t already had a cyber attack, you should assume it will.
Ready to put these ideas to work?
Tell us what you're working on, and we'll bring the right engineers to the conversation. We respond within one business day.