Cool Tools Series: CeWL for Penetration Testing
Lead Penetration Tester Jason Taylor discusses how the CeWL Custom Word List generator can improve hashcat results for penetration testing.
Penetration Testing Blog
Offensive security, written by the professionals who live it.
AD Series: Using Evil-WinRM to Get NTDS Manually in Penetration Tests
Principal Penetration Tester Andrew Trexler’s Active Directory series is back, showing how to use Evil-WinRM to copy NTDS.dit manually in penetration tests.
Password Series: 8 Practical First Steps to Crack Difficult Passwords in Penetration Tests
From rulesets & hardware to wordlists and mask attacks, Lead Penetration Tester Ryan Chaplin shows how to crack difficult password hashes in penetration tests.
PSE & Red Team Series: OSINT & Reconnaissance
Raxis lead penetration tester, Nathan Anderson, begins our PSE & Red Team series discussing the importance of OSINT and reconnaissance to begin the assessment.
Tips for Scoping Your Penetration Test
Scoping your penetration test (especially your first one) can be daunting. Our team is always happy to help, and Brad Herring gives you a head start here.
Cool Tools Series: How Vim Powers Penetration Testing
Principal Penetration Tester, Andrew Trexler, dives into Vim, a powerful command line tool for text files, and shows useful commands for penetration testing.
Cybersecurity: It’s how to say “Yes.”
Contrary to common misconceptions, cybersecurity acts as a powerful enabler in the digital age, fostering innovation, driving business growth, and empowering organizations to harness technology’s full potential. By building trust, accelerating innovation, enabling emerging technologies, enhancing ef
Accepting Penetration Test Risks & How Compensating Controls Can Help
Tim Semchenko discusses documenting acceptance of risks and implementing compensating controls as options when pentest findings cannot be fixed immediately.
Cool Tools Series: Masscan for Penetration Testing
Continuing our Cool Tools Series, Lead Penetration Tester Andrew Trexler shows how to use masscan for discovery scanning on large networks in penetration tests.
Jason Taylor, Lead Penetration Tester
Jason Taylor, lead penetration tester, has a love of learning that has taken him from network admin to cybersecurity with a bit of 3D printing too!
Password Series: Defeating Emerging Password Security Trends with Psudohash for Penetration Testing
Lead Pentester Ryan Chaplin discusses emerging improvements in password security and how Psudohash can help bypass them on penetration tests.
Why Raxis Attack PTaaS is a Huge Win for Organizations
With the recent launch of Raxis Attack, a powerful PTaaS service, Caroline Kelly is excited to share how it can help organizations of all sizes stay secure.
298 posts, newest first.