If you are looking to break into the field of offensive security and you are asking yourself whether you should aim to become a penetration tester or a bug bounty hunter, read on. In this article we will look on the pros and cons of both career paths and lay down some of the key […]
Become a Penetration Tester vs. Bug Bounty Hunter? Read More »
In this article we will look on 12 free and open-source vulnerability scanners for CMS (Content Management System) such as WordPress, Joomla, Drupal, Moodle, Typo3 and similar publishing platforms. We will look on Droopescan, CMSmap, CMSeeK, WPXF, WPScan, WPSeku, WPForce, JoomScan, JoomlaVS, JScanner, Drupwn, Typo3Scan vulnerability scanners that were developed specifically to find vulnerabilities in
CMS Vulnerability Scanners for WordPress, Joomla, Drupal, Moodle, Typo3.. Read More »
In this post, we will be introducing a new minimalistic tool for local privilege escalation attacks in Microsoft Windows systems. The tool is called localbrute.ps1 and it is a simple local Windows account brute force tool written in pure PowerShell. It doesn’t require any 3rd party modules and it is very small in size, which
Windows Local Admin Brute Force Attack Tool (LocalBrute.ps1) Read More »
Did you know that there are over 350 post exploitation modules in the current Metasploit Framework version that comes pre-installed on the Kali Linux? How many of them do you use during your penetration testing activities? If you are like me, chances are that you might be using only a handful of them. Well, hopefully
Post Exploitation Metasploit Modules (Reference) Read More »
Many people keep asking how to get into the information security field and how to become ethical hacker or a penetration tester. Whether you are a seasoned IT professional looking to get into the infosec industry or you are just starting your journey, here is something that can definitely kick-start your career in the right
Where To Learn Ethical Hacking & Penetration Testing Read More »
Introducing another addition to our portfolio of minimalistic tools for pentesting. This time we are going to be looking on a minimalistic TCP and UDP port scanner. Written in pure PowerShell, this small yet powerful port scanner is useful in specific attack simulations where we cannot use any traditional or typical port scanners. Introduction There
Port Scanner in PowerShell (TCP/UDP) Read More »
Have you ever wondered what are the most common vulnerabilities found during penetration tests? What are some of the typical security problems of corporate networks? In this article we will be going through the Top 10 list of the most reported vulnerabilities during internal infrastructure penetration tests. Disclaimer The following information was compiled from more
Top 10 Vulnerabilities: Internal Infrastructure Pentest Read More »
Introducing another addition to our portfolio of tools designed for restricted environments – a minimalistic SMB brute force attack and password spraying tool SMBLogin.ps1. This compact SMB login attack tool was written in pure PowerShell and it comes handy in specific attack simulations where we cannot use any traditional or typical pentesting tools. Introduction Although
SMB Brute Force Attack Tool in PowerShell (SMBLogin.ps1) Read More »
This blog post introduces our newest addition to our pentesting arsenal, the ssh-putty-brute.ps1. This tool can turn the well-known PuTTY SSH client (putty.exe or plink.exe) into a reliable SSH login brute force tool which in addition also evades any Antivirus or endpoint protection solution. Why using PuTTY for SSH brute forcing? There are many great
SSH Brute Force Attack Tool using PuTTY / Plink (ssh-putty-brute.ps1) Read More »
What soft skills and technical competencies does it take to became a professional penetration tester or ethical hacker? In this article we will discuss in detail what are the top 25 areas every pentester should be familiar with and what skills you should focus on if you want to become a professional penetration tester. Let’s
Top 25 Penetration Testing Skills and Competencies (Detailed) Read More »
