This One Time on a Pen Test

This One Time on a Pen Test: CSRF to Password Reset Phishing

In the latest edition of our "This One Time On a Pen Test" series, we take a look at an engagement featuring Cross-site request forgery attacks.

读到现在 2m

Behind the Scenes: 连帽衫下 2020 Video Series

在这个博客中, we take you on a behind-the-scenes look at the making of our 2020 连帽衫下 video series.

读到现在 1m

This One Time on a Pen Test: How I Hacked a Self-Driving Car

In our latest edition of "This One Time on a Pen Test," we take a deeper look at an engagement involving a self-driving car.

读到现在 2m

This One Time on a Pen Test: Doing Well With XML

In the latest edition of "This One Time on a Pen Test," we discuss a classic web application engagement involving XML.

读到现在 2m

This One Time on a Pen Test: I Know...一切

In the latest edition of "This One Time on a Pen Test," we follow a Rapid7 penetration tester as they perform an internal network engagement.

读到现在 2m

This One Time on a Pen Test: Ain’t No Fence High Enough

In this edition of "This One Time on a Pen Test," we discuss an engagement with for an energy company with a high-fence compound.

读到现在 2m

This One Time on a Pen Test: How I Outwitted the Vexing VPN

In this edition of "This One Time on a Pen Test," we discuss outwitting the vexing VPN.

读到现在 2m

This One Time on a Pen Test: Our Accidental Win

在这个博客中, we recall one pen test where a placeholder password we put in actually worked with one login account.

读到现在 1m

This One Time on a Pen Test: What’s in the Box?

Here is the story of how one of our penetration testers exploited ExternalBlue on a rogue access point.

读到现在 1m

This One Time on a Pen Test: Your Mouse Is My Keyboard

在一次约会中, we were tasked with compromising the internal network of a facility that was used for medical trials. Here's what happened.

读到现在 2m

This One Time on a Pen Test: Nerds in the NERC

Here is the story of how we gained access to a NERC CIP control room in a power plant as part of a penetration testing engagement.

读到现在 1m

This One Time on a Pen Test: Missed a Spot

In this penetration testing story, Ted Raffle discusses how even strong security controls 和 threat mitigation can miss the mark when only one or two systems fall through the cracks.

读到现在 2m

This One Time on a Pen Test: How I Compromised a Healthcare Portal Before My Hot Cocoa Went Cold

Here is the story of how I used a simple SQL injection attack to compromise a healthcare portal.

读到现在 2m