Jul 21, 2022
Pentest Files: Stealing Amazon EC2 Creds via Server Side Request Forgery
Using Server Side Request Forgery to retrieve EC2 Credentials
Jun 23, 2022
Pentest Files: Docker Breakout
Is docker secure? Only if you take precautions - otherwise you may find this vulnerability.
May 18, 2022
Pentest Files: Admin Account Takeover via Password Reset
How you can exploit IDOR to gain access to a Admin account
Apr 08, 2022
Pentest Files: Error Messages And Cloud Access Keys
Revealing AWS keys is a big no no, here's an example of what one of our testers found in a recent penetration test.
Apr 07, 2022
The Secret to Google's Security
Did you know that Google has never been the victim of a successful phishing attack? Not bad for a company of 140,000 staff and counting.
Feb 22, 2022
When Sony BMG Exposed Millions To Malware Attacks
Sony is a gigantic multipartite corporation that has been prone to multiple different types of hacks, leaks and vulnerabilities that have affected nearly every part of its business and forced it to rely more heavily on social engineering testing.
Top Articles
-
File upload tricks and checklist
May 25, 2021
-
-
Pentesting PostgreSQL with SQL Injections
May 12, 2020
-
Server Side Template Injection with Jinja2
Apr 29, 2020
-
