Our Blog
Resources and insights
The latest industry news, interviews, technologies, and resources.
Password Cracking For Pentesters: A 5-Step Guide
A look at Heath Adams’ five step methodology for cracking password hashes to quickly establish credentialed access during a penetration test.
SOC Tools Every Analyst Should Know
This blog will dive into the general categories of SOC tools and techniques crucial for succeeding as an analyst and list a few specific examples.
How to Learn Assembly: Beginner Project
Start learning the assembly coding language with a simple project by following the steps as we break the code down into manageable sections.
Boost Your Security Program for WFH Employees
With communities beginning to open back up, companies are considering the decision to stay remote. And this comes with good reasons. The cost of leasing space might be prohibitive and downsizing to host only necessary business functions could help with expenses....
Should I Whitelist A Penetration Tester’s IP?
While working out the details with a client for an upcoming security assessment, whitelisting the penetration testers IP addresses always generates additional conversation. It may seem odd because you wouldn’t whitelist your adversaries to bypass a security control,...
The “Medium Risk” Finding That’s Destroying Your Security Program
Many of our clients perform vulnerability scanning on a regular basis but find that they still don’t perform as well as they’d like on penetration tests. Well today we’re going to discuss a finding that’s frequently found on networks, that many vulnerability scanners...
Is “After-Hours” Testing Worth It?
Conducting security testing in the off-hours may be the best option to avoid disruption to business processes. However, we often find that it isn’t necessary.
So You Want to Be a Hacker: 2021 Edition
Video Version: https://www.youtube.com/watch?v=mdsChhW056A Introduction Recently, I posted a 36-part Twitter thread (https://twitter.com/thecybermentor/status/1343471814132031488) on how to become an ethical hacker in 2021. Given that it was well received, I thought...
Pentest Tales #001: You Spent How Much on Security?
Welcome to the first edition of Pentest Tales, a blog series that walks through real-world pentests we've performed in the past. The purpose of this blog is not just to share the "owning" of a domain, but to provide education as to why a domain was owned in the first...
Stay Ahead of Cyber Threats
Get expert insights on the latest penetration testing strategies, emerging vulnerabilities, and cybersecurity best practices—straight to your inbox.
Loading form...
We care about your data in our privacy policy.








