Dev’s Fast Reporting of Phish Reduced Impact on Blockchain Malware Attacks
A recent successful phish allowed attackers to run malware targeting cryptocurrency transactions on various blockchains, but fast reporting limited the damage.
Penetration Testing Blog
Offensive security, written by the professionals who live it.
Cool Tools Series: Croc for Secure Data Exfiltration
Lead Penetration Tester Nathan Anderson provides tips on using croc for secure data exfiltration just like he does on red team engagements.
Dangers of Storing Sensitive Data in Web Storage: 5 Real Attack Scenarios
Lead Penetration Tester Ryan Chaplin walks us through 5 real-world attack scenarios used in real-world penetration tests by Raxis.
Specialized Services: The Answer to Your Custom Cybersecurity Needs
We love to hear that our cybersecurity services have been useful to our customers. See how a specialized device test was just that and how we can help you too.
Raxis Announces New Outbound Sales Roles in Atlanta
Self-motivated, organized and enjoy listening to potential customers to help them scope penetration tests? Raxis is looking for outbound sales reps.
Raspberry Pi Planted in Failed ATM Heist
Raxis CTO Brian Tant discusses the Raspberry Pi used in a recent ATM heist and how Raxis uses the same type of device in our pentesting.
PSE & Red Team Series: The Power of Grip to Enhance the Under-Door Tool
In this next post in our PSE and Red Team Series, Brad Herring explains how to use gaffer’s tape or heat-shrink tubing to make an under-door tool easier to use.
Raxis at DefCon 2025
DefCon 33 has come and gone, and the Raxis team was there keeping up with cutting edge exploits for penetration tests, phishing, and PSE.
Choosing a Penetration Testing Company: Part 3
Caroline Kelly concludes our three-part “Choosing a Penetration Testing Company” series with how Penetration Testing as a Service (PTaaS) provides great value.
Microsoft Releases Security Patch for Actively Exploited On-Premises SharePoint Vulnerabilities
Microsoft has released patches for two critical vulnerabilities allowing unauthenticated remote code execution that affect on-premises SharePoint installations.
OWASP Top 10 for LLM Applications Penetration Testing
Lead Penetration Tester Jason Taylor looks at OWASP’s Top 10 list for LLM applications for penetration testing as AI machine learning becomes prevalent.
Choosing a Penetration Testing Company: Part 2
Brad Herring continues our three-part “Choosing a Penetration Testing Company” series with a look at the factors to consider when choosing the best vendor.
293 posts, newest first.