Blog

Fingerprinting (also known as footprinting) is the process of enumerating a target online presence, often the first step when planning an attack.

Application-level attacks are those attacks that exploit weaknesses in a program, rather than in its underlying infrastructure.

Your password is the gateway to your account. Once inside, a hacker can access a wealth of personal or company information, and use it for their own ends— like divulging trade secrets, fraud or accessing data. Crafting a secure password is essential in reducing risks to your account and information and keeping your data safe — whether at home, work, or on-the-go.

Penetration Testing as a Service (PTaaS), which is more commonly shortened to ‘Pen Test as a Service’ is the delivery of penetration testing services via a cloud-hosted portal with the testing itself normally conducted by a third-party contractor either employed or subcontracted (via a human resource ‘marketplace’) by the vendor's portal.

Many people in a home or work environment these days have laptops and mobile phones which need to connect to the internet via a wireless network. Although convenient, it can open up the network to attackers if not set up correctly.

Although Microsoft 365 has many built-in security features which can make the environment safe against attackers, this relies heavily on whether the environment has been set up properly. Many critical issues can arise when a Microsoft 365 environment has been incorrectly configured.

Application penetration test vs vulnerability scanning An application penetration test differs from vulnerability scanning in that it is a human-led operation. Whilst automated tools will be used, this activity is much more in-depth than just that. This type of testing…

Session hijacking is an attack that consists of exploiting the web applications users' session control in order to impersonate other users who are using the application.

Development Operations (DevOps) and Development Security Operations (DevSecOps), while sharing similar principles, have slightly different areas of concern.

Sniffing is the technique or process of capturing (sniffing) data packets over a network. It is historically related to the harvesting of clear-text credentials transmitted due to a login action.

The types of penetration testing that retail stores need will directly be linked to the assets they have and what they are trying to protect.

Malicious code usually performs actions against the user’s interest.

CEH or Certified Ethical Hacker (EC-Council) has a recommended requirement of two years of IT experience with some basic familiarity with Linux or Unix. Additionally, it is recommended to have a good understanding of Cyber Security principles.

Penetration testing software is the toolset of penetration testers. These range from enumeration tools such as host and port discovery to exploitation tools such as password brute-force suites and exploit generation, as well as many more.

Network penetration tests are used to identify security weaknesses within the networks (both internal networks and external networks). This includes testing for correct network segmentation and appropriate security boundaries.

Cyber security enumeration is a process used by both security professionals and attackers alike to establish a collective knowledge of the target and its assets. Using this knowledge specific attack vectors can be used to target weak points that exist based on the information gathered.