Penetration Testing

Nihaal Prasad

How to go Phishing with Gophish

How to conduct basic phishing campaigns using Gophish, an open-source tool for testing an organization’s vulnerability to phishing.

Top 3 Reasons Why Organizations Should Get a Penetration Test Today

Cybersecurity breaches and other incidents have become increasingly frequent and more impactful over the last year. In a recent high-profile

Liana Parakesyan

Masterful Policies and Compliance: Industries, Policies, Regulations, and How to Get Started

Policy assessments should be considered as a cybersecurity best practice and should be conducted annually with other assessments such as vul

Mattia Campagnano & Wade Ma

Vulnerability Scanners and the SAINT Experience

Vulnerability scanners assist in the identification and detection of vulnerabilities arising from misconfigurations or insecure coding with

Mattia Campagnano

Weaponizing Windows Binaries and Scripts (LOLBAS): What's Old Is New Again

One of the latest trends in penetration testing and malware development is to weaponize the so-called Living Off the Land Binaries and Scrip

Mattia Campagnano

Ransomware Attacks Are on the Rise, Should You Pay the Ransom?

However, sometimes the answer to this question cannot be so clear-cut. Much depends on how valuable the information being held for ransom is

Liana Parakesyan

Wi-Fi Hacking: A How To for Penetration Testers

To sniff Wi-Fi, we use Alfa USB Wi-Fi adapter which connects to laptop via USB. For longer range sniffing, the 16 dBi Yagi antenna can be co

Polito, Inc.

Netcat Reverse Shell Fixup

*This blog entry was originally published on July 27, 2015 on the original Polito Blog by Ian Duffy. It was re-posted on October 3, 2017...

Ian Duffy

Netcat Reverse Shell Fixup

When penetration testing, sometimes we get netcat (or equivalent) shells back from Linux / Unix systems that have some pretty severe restric

Admin

Vulnerability Assessment vs. Penetration Test: Key Differences and Objectives

On occasion we encounter questions about the differences between a vulnerability assessment and penetration test. While the end goal in both