May 18, 2022
Pentest Files: Admin Account Takeover via Password Reset
How you can exploit IDOR to gain access to a Admin account
Apr 08, 2022
Pentest Files: Error Messages And Cloud Access Keys
Revealing AWS keys is a big no no, here's an example of what one of our testers found in a recent penetration test.
Apr 07, 2022
The Secret to Google's Security
Did you know that Google has never been the victim of a successful phishing attack? Not bad for a company of 140,000 staff and counting.
Feb 22, 2022
When Sony BMG Exposed Millions To Malware Attacks
Sony is a gigantic multipartite corporation that has been prone to multiple different types of hacks, leaks and vulnerabilities that have affected nearly every part of its business and forced it to rely more heavily on social engineering testing.
Feb 15, 2022
Enquiry Ordered Into GCHQ’s Deal With Amazon
Online US retail giant Amazon has used its cloud operations to do a deal with the GCHQ, MI5, and MI6, The Financial Times reports.
Jan 15, 2022
Microsoft Gets Rid Of Passwords
All businesses hold important and private information over the internet these days, putting them at risk of a serious security breach if someone was to hack into this data. Despite this, many have a distrust of online security.
Top Articles
-
File upload tricks and checklist
May 25, 2021
-
-
Pentesting PostgreSQL with SQL Injections
May 12, 2020
-
Server Side Template Injection with Jinja2
Apr 29, 2020
-
