Ever Run a Relay? Why SMB Relays Should Be On Your Mind
Time is never on your side when you’re onsite with a client and trying to get the first good foothold, with admin privileges, can seem impossible.
Targeted Pineapple Setup (7 easy steps to gather credentials onsite)
The WiFi Pineapple Tetra is a wireless auditing tool from Hak5 that simplifies and automates the process of performing many wireless attacks.
Are You Ready for Your Pen Test?
It is day three of a five-day penetration test engagement and we still don’t have all the information we need to proceed with the test.
Red Teaming – Not What You May Have Thought
I’ve been doing a lot of reading on some less technical topics and I ran across “Red Team: How to Succeed By Thinking Like the Enemy” by Micah Zenko.
Introduction to Metasploit Webcast
Whether you’re goal is to become a commercial penetration tester, to demonstrate the risk of a vulnerability, or just need to identify certain weaknesses..
Practical Pentest Advice from PCI
The PCI Security Standards Council released a Penetration Testing Guidance information supplement in March 2015.
What Do You Expect From A PenTest?
There are many reasons that a company has a penetration test performed. Due to regulatory compliance, like HIPAA, or they are just take security seriously
Intercepting DNS
Recently during a penetration test, I discovered a Linksys WRT54G wireless router that had been installed on a customer’s network.
SIAM: Custom Testing Machines
Secure Ideas recently made the decision to create custom machines that we could use for penetration testing engagements.
Preparing for a Consultant
As security consultants, we regularly travel to clients’ sites and experience a wide range of environments and atmospheres.