5 min read
More MobSF – Mobile Application Penetration Testing #3
Part three of the mobile series works through MobSF output: signer certificates, Android permissions, and the API calls worth following up by hand.
Read the post →Blog — page 8
Research and analysis
The latest security treads, threat analysis, testing methodology, and more — from the people doing the work.
113 posts
- 3 min read
What is the Difference Between Vulnerability Assessments and Penetration Testing?
A vulnerability assessment lists what might be wrong. A penetration test proves what an attacker can do with it. The differences, and which one you need.
Read the post → - 5 min read
AI-Enhanced Reconnaissance: Fueling Sophisticated Security Breaches
Attackers use models to turn public DNS, GitHub, and job posts into a working map of you. The incident looks sophisticated when the first step was free.
Read the post → - 4 min read
Does Affordable Penetration Testing Exist?
Small businesses assume real testing is out of reach. What drives the price of an engagement, and how to get meaningful coverage on a constrained budget.
Read the post → - 6 min read
Mobile Application Penetration Testing – #2 – MobSF Intro
MobSF is the tool you will reach for on every mobile engagement. Installing it, running an APK through it, and what its static analysis actually tells you.
Read the post → - 5 min read
Mobile Application Penetration Testing – #1 – Getting Started
Part one of our mobile testing series: jailbreaking, rooting, and getting the IPA or APK you need before any real testing on iOS or Android can start.
Read the post → - 2 min read
Turkeys Will Get Stuffed Soon. Credentials Will Get Stuffed Now.
Credential stuffing is unsophisticated and works anyway, because people reuse passwords. How the attack runs, and which controls actually blunt it.
Read the post → - 4 min read
Unmasking the Shadows: The Unseen Vulnerabilities Within Your Walls
An internal penetration test answers the question an external one cannot: what happens once somebody is already inside. The process, and the usual findings.
Read the post → - 2 min read
Beyond the Breach: The Essential Role of Regular Penetration Testing in Safeguarding Organizational Reputation
The Clorox cyberattack cost far more than remediation. Why reputational damage outlasts the incident, and where regular testing changes the outcome.
Read the post → - 3 min read
Guarding the Digital Front Door: The External Penetration Test
An external penetration test covers everything an attacker can reach from the internet without credentials. What is in scope, and what the results tell you.
Read the post →