AD Series: Using Evil-WinRM to Get NTDS Manually in Penetration Tests
Principal Penetration Tester Andrew Trexler’s Active Directory series is back, showing how to use Evil-WinRM to copy NTDS.dit manually in penetration tests.
-
-
Understanding PTaaS: Penetration Testing as a Service
What does Penetration Testing as a Service (PTaaS) really mean? In this blog we discuss the details and how do you find the best PTaaS for your organization.
-
Password Series: 8 Practical First Steps to Crack Difficult Passwords in Penetration Tests
From rulesets & hardware to wordlists and mask attacks, Lead Penetration Tester Ryan Chaplin shows how to crack difficult password hashes in penetration tests.
-
Tips for Scoping Your Penetration Test
Scoping your penetration test (especially your first one) can be daunting. Our team is always happy to help, and Brad Herring gives you a head start here.
-
Cool Tools Series: How Vim Powers Penetration Testing
Principal Penetration Tester, Andrew Trexler, dives into Vim, a powerful command line tool for text files, and shows useful commands for penetration testing.
-
Cybersecurity: It’s how to say “Yes.”
Contrary to common misconceptions, cybersecurity acts as a powerful enabler in the digital age, fostering innovation, driving business growth, and empowering organizations to harness technology’s full potential. By building trust, accelerating innovation, enabling emerging technologies, enhancing efficiency, ensuring compliance, supporting remote work, and protecting intellectual property, robust cybersecurity measures create a secure foundation for organizations to thrive and innovate in an increasingly interconnected world.
-
Accepting Penetration Test Risks & How Compensating Controls Can Help
Tim Semchenko discusses documenting acceptance of risks and implementing compensating controls as options when pentest findings cannot be fixed immediately.
-
Cool Tools Series: Masscan for Penetration Testing
Continuing our Cool Tools Series, Lead Penetration Tester Andrew Trexler shows how to use masscan for discovery scanning on large networks in penetration tests.
-
Jason Taylor, Lead Penetration Tester
Jason Taylor, lead penetration tester, has a love of learning that has taken him from network admin to cybersecurity with a bit of 3D printing too!
-
Password Series: Defeating Emerging Password Security Trends with Psudohash for Penetration Testing
Lead Pentester Ryan Chaplin discusses emerging improvements in password security and how Psudohash can help bypass them on penetration tests.
-
Why Raxis Attack PTaaS is a Huge Win for Organizations
With the recent launch of Raxis Attack, a powerful PTaaS service, Caroline Kelly is excited to share how it can help organizations of all sizes stay secure.
-
Cool Tools Series: Nuclei for Penetration Tests
Raxis’ Andrew Trexler shows how useful Nuclei is for network and application penetration tests, discovering vulnerabilities such as default passwords and more.
