Should Social Engineering Be In-Scope For An External Pentest? The short answer is yes; social engineering should be included in the scope of any serious external penetration test. Any test of the perimeter defense of an organization’s network without social...
What separates a good guy (white hat) from a bad guy (black hat)? The bad guy will either hack you for profit or hold your information for ransom in exchange for monetary gain or brand damage. The good guy will tell you what is insecure about your company, and most...
What are the ways that you can start to understand the niche field of Mobile Application Penetration Testing? This blog series will explain some of the best tools and mobile apps you can use today to start learning about this exciting field. Introduction: What is...
0. Overview Penetration testing, also known as pen testing or ethical hacking, is a proactive cybersecurity measure designed to identify and fix vulnerabilities in your systems before malicious hackers can exploit them. Understanding the cost of penetration testing is...
Overview On December 16, 2023, TCM Security held our first annual invitational CTF with the help of MetaCTF! Any student holding a current All-Access Membership at TCM Academy could take part in the CTF, which featured plenty of challenges! In this blog post,...
Overview Despite its popularity as an SQL injection example, we argue that “OR 1=1” presents more risks than rewards. It may work for login bypasses occasionally, but its reliability is questionable, and better alternatives exist. We explore the drawbacks,...
