Penetration Testing Archives

Examining code execution features in Apache NiFi

During a recent penetration test my team and I encountered

This is a short story about how a seemingly small

This post will walk through the basics for getting started

This post briefly examines two flawed implementations of Multi-Factor Authentication

Introduction I recently wrote a post on enumerating valid usernames

With the release of Burp Suite Professional 2.0 came

Introduction When performing security testing on a website, one of

This post discusses a flaw in the Dashlane password manager.

This post explains basic interactions with FTP using Python3 from

I’ve recently come across (or read about) several vulnerabilities dealing