Easy Way to Steal WiFi Passwords
Why waste time and resources capturing traffic and brute forcing WiFi passwords if there is an easy way to steal them?
Topic
Penetration Testing
32 articles on this topic.
Automated OSINT for Security Assessments
If you are a red teamer or a penetration tester you got to love automated OSINT tools which will help your security assessments. Here is one of the best ones.
NIST Publications on Penetration Testing
Penetration Testing is being mentioned in several NIST publications. See which those publications are and get more info on their recommendations.
A List of Tools to Help you Detect the Log4j Vulnerability
How can you detect the Log4j zero day vulnerability (known as Log4shell)? Here's a list of FREE Log4j vulnerability scanner tools.
Build a Penetration Testing Lab on a Raspberry Pi with DVWA
You can build a pentest lab on a raspberry pi with DVWA to test your skills and also learn new tricks on how to attack and/or secure web applications.
Hunt a Username on Social Media with Sherlock
Many users register themselves on websites using the same username. If you are performing an investigation on a person, and especially if you know a username or handle they are usually using online, you may hunt for usernames on social media platforms with Sherlock.
How To Find Domains Owned by a Company
During a black box, or grey box penetration testing engagement for a company, one of the main things you will need to find domains owned by the company.
Find Web Server Vulnerabilities With Nikto
Nikto is an open source scanner capable of scanning for over 6700 items to detect any misconfigurations on web servers like Apache, Nginx, Litespeed etc. as well as discovery of exposed files, user enumeration and outdated components.
Discover Subdomains During A Penetration Testing Engagement
During an external penetration test, and especially if it is a black-box engagement, one of the most important steps is to find subdomains used by the target company.
Enumerate and Capture Website Files Metadata
Many organizations are uploading files on their websites like pdf, word and excel without being aware that they are exposing sensitive information. You can enumerate and capture the files and its metadata.
Cool Nmap Tricks and Techniques
A list of not so commonly used but powerful Nmap commands to help you bring your enumeration skills to the next level.
How to Become a Cybersecurity Expert
What are the skills needed to start in the cybersecurity field? Here are some practical steps you can take to dive in and build your skills.
Penetration Testing: Pre-Engagement Interactions
There are many important actions you should focus on prior to diving into a penetration test. PenTests are not just point-and-shoot activities.
Five Penetration Testing Frameworks and Methodologies
Which are the best frameworks for penetration testing? What are the attributes of each and which one is best for your organization?