Our Blog
Resources and insights
The latest industry news, interviews, technologies, and resources.
Ethically Hacking LLMs | 1 – Neural Networks
In this first blog in the series, we’re going to learn about the fundamentals of how neural networks and LLMs work to better understand how to attack them.
Practice Assembly With A Buffer Overflow Exercise
Use our free resource, Overflowme, to learn about programming in assembly and how the classic buffer overflow vulnerability can be exploited.
How To Identify URL Phishing Techniques
In this blog, we’ll break down some of the most common URL phishing tactics, identify detection and analysis methods, and discuss strategies to defend against them.
Should a Company Provide Credentials for Their Penetration Test?
Is giving credentials to a pentester considered cheating? Or is it an efficient use of resources during a limited engagement? Learn about both perspectives.
API Discovery with Kiterunner
Content discovery is often focused on finding files and folders. However, modern applications not longer conform to this hierarchical approach and specifically applications that use APIs. Kiterunner is a tool that can be used to discover routes and endpoints used in...
Encoding and Decoding Primer
When testing web applications, the understanding and use of various encoding schemes is a fundamental skill. Learn more about encoding and decoding schemes.
The Best Apps for Keeping Notes: Pros & Cons
What is the best note-taking application for pentesters? It’s a hot debate, and if you prefer to watch than read then we recently compared many of the popular options in this video. Otherwise, let’s take a look at what each app has on offer to help you decide what’s...
ID Tokens vs Access Tokens: What’s the Difference?
In the realm of secure authentication, two key elements often come to the fore: ID tokens and access tokens. Though these elements might seem similar, understanding their differences, common pitfalls, and best practices is crucial in ensuring the security of your...
Clickjacking 101: What is Clickjacking and How Does it Work?
Clickjacking, also known as UI Redressing, is a technique that tricks users into clicking on unintended elements on a website. Learn more about how it works.
Stay Ahead of Cyber Threats
Get expert insights on the latest penetration testing strategies, emerging vulnerabilities, and cybersecurity best practices—straight to your inbox.
Loading form...
We care about your data in our privacy policy.








