Is it Possible to Automate Penetration Testing?
There is no such thing as automated penetration testing. The key defining feature of a pen test is the presence of a highly skilled human pen tester.
Insights
The Winmill blog
Our team shares practical guidance on AI, Azure, cybersecurity, and enterprise IT.
Application Scan Identifies an SSRF Vulnerability; Penetration Test Finds Exploitation Attack Vectors
Introduction (Pen Test vs.
Padding Oracle Attack: Are You Vulnerable?
In this demonstration, we will mount a cryptographic attack known as a “padding oracle attack” against a web application that...
Extracting Threat Information from the Apache Access Log
We will be using the Apache log file for the analysis.
Penetration Testing: Windows Server 2016 Breached via Web Apps
Penetration testers say that, given enough time and resources, any system can be hacked.
Penetration Test Reveals SYSTEM Access to MSSQL Server via SQL Injection and File Overwrite
In this demonstration we will exploit an MSSQL server through a penetration test, involving a series of SQL injections, that...
External Pen Test Breaches Company’s Perimeter Via WordPress
External penetration testing (also known as external network penetration testing) is a security assessment of an organization’s perimeter systems.
Migrating Legacy Applications to the Cloud: Four Viable Approaches
We often help companies who want to move their legacy applications to the Cloud.
Vulnerability Aggregation Tools Review: The Top 4 Tools
When it comes to penetration testing, there is no shortage of vulnerability aggregation tools including management and report generation tools.
How to Test Your Own Vulnerability to the Log4Shell Attack Chain in Apache Solr
2025 Update: In the years following the Log4Shell vulnerability disclosure, this incident has become a cornerstone case study in cybersecurity response.
Penetration Testing: Gaining System Admin Control in Minutes
In this penetration testing admin article, we show how easy it is to attack the Manage Engine web application, using...
Understanding the Differences between Penetration Testing and Vulnerability Scanning
Penetration testing and vulnerability scanning are two vastly different ways to check the security of your systems and infrastructure.
Ready to put these ideas to work?
Tell us what you're working on, and we'll bring the right engineers to the conversation. We respond within one business day.