Our Blog
Resources and insights
The latest industry news, interviews, technologies, and resources.
Guide to Modern Penetration Testing Infrastructure
TCM’s pentest lead Aaron Wilson covers hardware, software, report templates, and other infrastructure considerations that make a pentest firm run smoothly.
Differences Between a Vulnerability Scan and a Penetration Test
Two of the most common questions clients ask are: What’s the difference between a vulnerability scan and penetration test and what option is best for my company? The differences between a vulnerability scan and penetration test are often confused. Let’s take a look at the key differences between the two options and paint a clearer picture on what option you should choose for your company.
Social Engineering And External Pentests
In this article, we will explore the benefits and drawbacks of social engineering and how to best include this tactic when defining the scope of an external pentest.
The Fundamentals of HTTP for Hackers
Hypertext Transfer Protocol (HTTP) is an application layer protocol. On the surface, HTTP can appear quite simple, but there are a lot of quirks considering its use across inconsistent browsers and servers. Check out a video version of this article:Breaking Down An...
Security Testing Requirements for PCI-DSS
Companies handling credit card data must adhere to the Payment Card Industry Data Security Standard. Learn which PCI-DSS requirements require security testing.
Technical Notes and Documentation
Understand the key differences between Penetration testing and Red Team engagements to ensure that you choose right course of action for your organization.
Things to Try When your Reverse Shell Fails
Target enumerated, check.Vulnerability identified, check.Tested payload delivery, check.RCE verified, check.Reverse shell...nope. Today we are going to look at some practical ways to troubleshoot your reverse shell. Some of these points come from logical thinking,...
Top Pentest Findings in 2022 from a First Year Pentester
The year 2022 has wrapped up and I find it helpful to share some of the most common findings I have encountered throughout the year. Some of these may not be surprising as they are covered in almost every cybersecurity awareness training course there is. However, it...
So You Want to Be a Hacker: 2023 Edition
Video Version: Introduction The past two years, we've posted blogs on how to become an ethical hacker. Given that these blogs have been well received, we have brought back yet another edition. So, without further ado, let's chat about how you can break into the field...
Stay Ahead of Cyber Threats
Get expert insights on the latest penetration testing strategies, emerging vulnerabilities, and cybersecurity best practices—straight to your inbox.
Loading form...
We care about your data in our privacy policy.








