Pentesters

Introduction The recent VMware VMSA describes four new CVEs affecting VMware vRealize Log Insight, reported by ZDI. Three of these…

After compromising a Windows domain controller, one of the actions that NodeZero, our autonomous pentest product, performs is dumping all…

Verifying credentialed access to your hybrid cloud sprawl matters more than ever. See example attack paths to understand risks to…

One of the most effective techniques NodeZero employs for initial access is password spray. It's a primitive technique, basically guessing…

Which is more valuable to you; the ability to identify a problem, or the ability to solve the problem? There…

I exploited the Mirai machine from Hack The Box using the same technique used by the infamous Mirai malware.

The Jerry machine from the Hack The Box platform nicely illustrates the danger of weak and default credentials.

After my last walkthrough of a machine named Blue on the Hack The Box platform, I received some flak from…

The engineering team has been working tirelessly to improve the "what to wow" user experience, add more attack content, add…

My friends tell me it’s in vogue these days for pentesters to write up walk-throughs of challenge boxes from Hack…