Insights

Pentesting authentication is a critical step of any gray-box pentest. Here we review steps of how a pentest should assess these controls.

Vulnerabilities affecting ELBs can be easily overlooked. It’s critical for pentesters to look out for these AWS features when analyzing an attack surface.

Input Validation is a fundamental concept of penetration testing. This guide is written for new pentesters and developers looking to bolster these core skills.

Curious about HIPAA requirements and what it means for your pentest? Let’s review some technical examples of why pentesting in healthcare is so unique.

Black Box, Gray Box, and White Box pentests have pros and cons. Here we lay out all the differences to help you decide which one fits best.

Reproducing vulnerabilities from a pentest report is a pain, but with just a few simple tips it doesn’t have to be.

In this blog post, we demonstrate how graphical user interfaces could be vulnerable to spoofing attacks by using certain Unicode characters.

Selecting a penetration testing company can be a pain. Here are five important tips to ensure you penetration testing vendor will set you up for success.

This is a tale of how we found a wormable XSS on Twitter, and how we managed to fully bypass its CSP policy.