Penetration Testing

Introduction to Proving Grounds

The Proving-Grounds offers both free and paid tier levels, where users can test their skills in a lab environment similar to other platforms

Playing with Bubbles: An Introduction to DLL-Sideloading

DLL Side-Loading is a pervasive technique partially because its behavior is difficult to detect. As a sub-technique of DLL Hijacking, it ta

How to go Phishing with Gophish

How to conduct basic phishing campaigns using Gophish, an open-source tool for testing an organization’s vulnerability to phishing.

Top 3 Reasons Why Organizations Should Get a Penetration Test Today

Cybersecurity breaches and other incidents have become increasingly frequent and more impactful over the last year. In a recent high-profile

Masterful Policies and Compliance: Industries, Policies, Regulations, and How to Get Started

Policy assessments should be considered as a cybersecurity best practice and should be conducted annually with other assessments such as vul

Vulnerability Scanners and the SAINT Experience

Vulnerability scanners assist in the identification and detection of vulnerabilities arising from misconfigurations or insecure coding with

Weaponizing Windows Binaries and Scripts (LOLBAS): What's Old Is New Again

One of the latest trends in penetration testing and malware development is to weaponize the so-called Living Off the Land Binaries and Scrip

Ransomware Attacks Are on the Rise, Should You Pay the Ransom?

However, sometimes the answer to this question cannot be so clear-cut. Much depends on how valuable the information being held for ransom is

Wi-Fi Hacking: A How To for Penetration Testers

To sniff Wi-Fi, we use Alfa USB Wi-Fi adapter which connects to laptop via USB. For longer range sniffing, the 16 dBi Yagi antenna can be co

Netcat Reverse Shell Fixup

*This blog entry was originally published on July 27, 2015 on the original Polito Blog by Ian Duffy. It was re-posted on October 3, 2017...

Netcat Reverse Shell Fixup

When penetration testing, sometimes we get netcat (or equivalent) shells back from Linux / Unix systems that have some pretty severe restric

Vulnerability Assessment vs. Penetration Test: Key Differences and Objectives

On occasion we encounter questions about the differences between a vulnerability assessment and penetration test. While the end goal in both

CONTACT US