Blog Back to HomeHome Blog Popular Posts AWS Best Practice Cloud Cloud Security Quick Tips Security Consulting Common Security Gaps in AWS: How to Lock Down AWS Is your cloud secure? Discover the most common AWS security gaps we uncover during audits, including public resources, IAM misconfigurations, … By: Gabriel Tocci July 22, 2025 2 Min Read Education But That System Isn’t On My Domain! Non-Domain-Joined System Security In today's blog, we are going to consider non-domain-joined system security. For most organization's we test, this can include things … By: Matt Miller May 19, 2021 2 Min Read Education What is the Haddon Matrix and How Does it Relate to Security? In this blog, we are going to take a look at the Haddon Matrix to see how it can be … By: Matt Miller September 29, 2020 2 Min Read Select Category API Penetration TestAWSAzureBest PracticeCertificationsCloudCloud SecurityCompany NewsComparisionCore ValuesCostCurrent EventsDeliverablesEducationExternal Penetration TestFirewall Configuration ReviewGDPR ComplianceHIPAAHITRUSTHost Compliance AuditIncident ResponseInternal Penetration TestIoT Penetration TestingMobile Application Penetration TestingNIST/DFARS ComplianceOracle CloudOSINTPassword AuditPCI CompliancePenetration TestPhysical Penetration TestProblemsQuick TipsRansomwareRed TeamRegulatorySecure SLCSecurity Awareness TrainingSecurity ConsultingSensitive Data MappingSmall BusinessSocial EngineeringTabletop ExercisesUncategorizedVulnerability ManagementVulnerability WalkthroughWeb Application Penetration TestWireless Penetration Test Web Application Penetration Test Common Web Application Vulnerabilities – Insecure Deserialization In starting to prepare for the Offensive Security Advanced Web Application Exploitation (AWAE) course, I ran across a vulnerability category … By: JR Johnson July 9, 2020 3 Min Read Education Incident Response Internal Penetration Test An Introduction to Ransomware In today’s blog, we will do a quick introduction to Ransomware. Ransomware is a form of malware (short for malicious software) … By: JR Johnson July 7, 2020 4 Min Read Best Practice Education What is the OSSTMM? The Open Source Security Testing Methodology Manual, or OSSTMM, was created to: ...provide a scientific methodology for the accurate characterization … By: Kyle Bork July 2, 2020 1 Min Read Vulnerability Walkthrough Web Application Penetration Test File Upload Validation Techniques File upload filtering is an extremely important part of web application security that is also notoriously hard to get right. … By: JR Johnson June 30, 2020 4 Min Read IoT Penetration Testing IoT Devices in the Home Today's blog is just a quick update on home security. As a security professional, one of the most common questions … By: Matt Miller June 25, 2020 3 Min Read Best Practice Education Security Tips When Working From Home Currently and going forward, many employees may find themselves working from home temporarily or permanently. Security is still extremely important … By: Kyle Bork June 23, 2020 2 Min Read API Penetration Test Most Common Methods of API Authentication Today, we're going to dig into the most common methods of API authentication out there and discuss some of the … By: JR Johnson June 11, 2020 4 Min Read Education Internal Penetration Test Quick Tips Red Team An Introduction to Kerberoasting In today's blog, we will be taking a high-level look at a popular attack called Kerberoasting. Kerberoasting is used by … By: JR Johnson June 9, 2020 2 Min Read Education Penetration Test Top Reasons to Become a Penetration Tester We are often times asked "why did you become a penetration tester" or "why should I get into penetration testing"? … By: Kyle Bork June 4, 2020 2 Min Read Load more Page 10 of 41« First«...89101112...203040...»Last »
AWS Best Practice Cloud Cloud Security Quick Tips Security Consulting Common Security Gaps in AWS: How to Lock Down AWS Is your cloud secure? Discover the most common AWS security gaps we uncover during audits, including public resources, IAM misconfigurations, … By: Gabriel Tocci July 22, 2025 2 Min Read
Education But That System Isn’t On My Domain! Non-Domain-Joined System Security In today's blog, we are going to consider non-domain-joined system security. For most organization's we test, this can include things … By: Matt Miller May 19, 2021 2 Min Read
Education What is the Haddon Matrix and How Does it Relate to Security? In this blog, we are going to take a look at the Haddon Matrix to see how it can be … By: Matt Miller September 29, 2020 2 Min Read
Web Application Penetration Test Common Web Application Vulnerabilities – Insecure Deserialization In starting to prepare for the Offensive Security Advanced Web Application Exploitation (AWAE) course, I ran across a vulnerability category … By: JR Johnson July 9, 2020 3 Min Read
Education Incident Response Internal Penetration Test An Introduction to Ransomware In today’s blog, we will do a quick introduction to Ransomware. Ransomware is a form of malware (short for malicious software) … By: JR Johnson July 7, 2020 4 Min Read
Best Practice Education What is the OSSTMM? The Open Source Security Testing Methodology Manual, or OSSTMM, was created to: ...provide a scientific methodology for the accurate characterization … By: Kyle Bork July 2, 2020 1 Min Read
Vulnerability Walkthrough Web Application Penetration Test File Upload Validation Techniques File upload filtering is an extremely important part of web application security that is also notoriously hard to get right. … By: JR Johnson June 30, 2020 4 Min Read
IoT Penetration Testing IoT Devices in the Home Today's blog is just a quick update on home security. As a security professional, one of the most common questions … By: Matt Miller June 25, 2020 3 Min Read
Best Practice Education Security Tips When Working From Home Currently and going forward, many employees may find themselves working from home temporarily or permanently. Security is still extremely important … By: Kyle Bork June 23, 2020 2 Min Read
API Penetration Test Most Common Methods of API Authentication Today, we're going to dig into the most common methods of API authentication out there and discuss some of the … By: JR Johnson June 11, 2020 4 Min Read
Education Internal Penetration Test Quick Tips Red Team An Introduction to Kerberoasting In today's blog, we will be taking a high-level look at a popular attack called Kerberoasting. Kerberoasting is used by … By: JR Johnson June 9, 2020 2 Min Read
Education Penetration Test Top Reasons to Become a Penetration Tester We are often times asked "why did you become a penetration tester" or "why should I get into penetration testing"? … By: Kyle Bork June 4, 2020 2 Min Read
