User enumeration is a common vulnerability found across many applications; however, it is typically missed by automated testing and only discovered with hands on keyboard testing. During an external penetration test, Triaxiom performs a series of automated scans for both discovery purposes (port mapping, discovery of assets, etc.), and vulnerability enumeration. Once those are complete, […]
At the onset of any engagement, Triaxiom Security engineers will begin with research, often called Open Source Intelligence Gathering, or OSINT for short. OSINT is the process of gathering publicly available information from the internet to gain a deeper understanding of an organization, its technology stack, and any potential vulnerabilities. Security engineers often conduct this […]
