Top Five Actions NOT to Take When Your Pentest Results are High Risk
Raxis’ Brian Tant explains the worst thing to do with negative pentest results is to ignore them & why taking action thwarts hackers & increases your security.
Penetration Testing Blog
Offensive security, written by the professionals who live it.
Goodies for Hoodies: TCP Timestamps
Does your penetration test always return a low-risk finding about TCP Timestamps? Why worry about it? Because it gives hackers info to use in other attacks.
IKE VPNs Supporting Aggressive Mode
In this post we’ll look at why IKE VPNs with Aggressive Mode enabled continue to be a vulnerability, how it can be exploited, and how to mitigate this risk.
Raxis API Tool
Raxis Lead Developer, Adam Fernandez, has developed a tool to use for testing JSON-based REST APIs, and we’re sharing this tool on GitHub to help API developers test their own code during the SDLC process and to prepare for third-party API penetration tests.
Web Attacks: Insecure Transmission of Data
Raxis COO Bonnie Smyre discusses the vulnerabilities that arise when web apps transmit data insecurely and what you can do to secure your apps.
Web Attacks: Clickjacking
Many of the external network and web application penetration tests that we perform list ‘clickjacking’ as a vulnerability. Here Raxis COO Bonnie Smyre explains what clickjacking is and how you can protect against it.
![Tailgating & Other Physical SE - SOCIAL ENGINEERING [PART 3]](/_astro/img-20-1.CHt-PakL_ZTGPj1.webp)
Tailgating & Other Physical SE – SOCIAL ENGINEERING [PART 3]
Raxis COO Bonnie Smyre discusses physical social engineering, which tests to see how your employees and systems react when someone who should not be allowed access attempts to get past your controls to gain access to your sensitive information and networks.
![Voice Phishing - Social Engineering[Part 2]](/_astro/img-12-1.D_Xbx6EI_Z2mgC6Y.webp)
Voice Phishing – Social Engineering [Part 2]
Raxis COO Bonnie Smyre discusses voice or phone phishing, also know as vishing, and how you can train your employees not to fall for the bait.
City of Atlanta 2018 Ransomware Hack: What We Know and What You Can Learn From It
Raxis, an Atlanta-based penetration testing company, pieces together facts pertaining to the March 22 ransomware attack on the City of Atlanta.
![Phishing Emails - Social Engineering [Part 1]](/_astro/img-13-1.DfnWoAL8_ZtBnP5.webp)
Phishing Emails – Social Engineering [Part 1]
Raxis helps many companies avoid corporate and customer information leakage from phishing emails targeted at unsuspecting employees. Raxis COO Bonnie Smyre tells more here.
Hopefully You’re Not Next
Raxis CEO Mark Puckett discusses current cybersecurity threats and why it doesn’t pay to be complacent.
Penetration Testing is a Critical Tool For Your Business
Raxis VP of Business Development discussed pentesting as a helpful tool. CISO’s need not fear “failing” a pentest… there is no failure worse than not know your vulnerabilities until it is too late.
290 posts, newest first.