Penetration Testing: What You Need to Know
Penetration testing is often misunderstood or confused with vulnerability assessment.
Author
David Stone
Director of Sales at Winmill
Is it Possible to Automate Penetration Testing?
There is no such thing as automated penetration testing. The key defining feature of a pen test is the presence of a highly skilled human pen tester.
Padding Oracle Attack: Are You Vulnerable?
In this demonstration, we will mount a cryptographic attack known as a “padding oracle attack” against a web application that...
Penetration Testing: Windows Server 2016 Breached via Web Apps
Penetration testers say that, given enough time and resources, any system can be hacked.
External Pen Test Breaches Company’s Perimeter Via WordPress
External penetration testing (also known as external network penetration testing) is a security assessment of an organization’s perimeter systems.
How to Test Your Own Vulnerability to the Log4Shell Attack Chain in Apache Solr
2025 Update: In the years following the Log4Shell vulnerability disclosure, this incident has become a cornerstone case study in cybersecurity response.
Five Best Practices to Prevent Ransomware Attacks
Ransomware attacks have dramatically risen in the past few years. The reasons for this are varied, but two stand out.
Nine Common Standards for Web Application Penetration Testing
You need to comply with a particular regulation or standard. Web application penetration testing may or may not help you meet its requirements.
Ready to put these ideas to work?
Tell us what you're working on, and we'll bring the right engineers to the conversation. We respond within one business day.