Brute Forcing the Change Password Feature

As a penetration tester, brute force attacks are something I test for on every application.

Admin Consoles, Default Creds, and Sweet Pwnage

When performing internal network penetration tests, one thing that really gets us excited is finding administrative consoles. 

Grey Box Penetration Testing

A common question I get from potential clients is “what is grey box testing and why do we need it?”