Penetration Testing

APRIL 16, 2024

Threat group TA427, aligned with the North Korean government, has been... The post North Korean Hackers Hone Social Engineering Skills, Abuse DMARC to Target Foreign Policy Experts appeared first on Penetration Testing.

Social Engineering 87

Social Engineering Engineering Penetration Testing Government 87

eSecurity Planet

APRIL 7, 2023

Kali Linux turns 10 this year, and to celebrate, the Linux penetration testing distribution has added defensive security tools to its arsenal of open-source security tools. Also read: 24 Top Open Source Penetration Testing Tools What Is Penetration Testing? An ethical hacking certification may help too.

Penetration Testing 125

Penetration Testing Social Engineering Energy and Utilities Hacking 125

Penetration Testing

NOVEMBER 26, 2023

B(l)utter Flutter Mobile Application Reverse Engineering Tool by Compiling Dart AOT Runtime Currently, the application supports only Android libapp.so. Install This application uses the... The post blutter: Flutter Mobile Application Reverse Engineering Tool appeared first on Penetration Testing.

Engineering 95

Engineering Mobile Penetration Testing 95

Penetration Testing

MARCH 6, 2024

Threat actors (TAs) are weaponizing a combination of social engineering, phishing infrastructure, and an advanced Android banking trojan to... The post Copybara Fraud Campaign Leverages On-Device Fraud and Social Engineering Tactics appeared first on Penetration Testing.

Social Engineering 90

Social Engineering Engineering Penetration Testing Banking 90

eSecurity Planet

FEBRUARY 20, 2023

Penetration tests find security vulnerabilities before hackers do and are critical for keeping organizations safe from cyber threats. Penetration test services have become common, with many security companies offering them. The program answers what, when, why, and where tests should run.

Penetration Testing 76

Penetration Testing Cyber threats Engineering Architecture 76

eSecurity Planet

FEBRUARY 24, 2022

A penetration test , or pen test, is the simulation of a cyber attack. This critical IT security practice isn’t the same as a vulnerability assessment or vulnerability scanning, though, as pen testing involves an actual attack similar to what hackers would do in real-world conditions. Best Pen Testing Frameworks.

Penetration Testing 104

Penetration Testing Wireless Passwords Social Engineering 104

Penetration Testing

NOVEMBER 9, 2023

de4py De4py is an advanced Python deobfuscator with a beautiful UI and a set of Advanced features that enable malware analysts and reverse engineers to deobfuscate Python files and more. Features Feature Function Deobfuscation... The post de4py: toolkit for Python reverse engineering appeared first on Penetration Testing.

Engineering 83

Engineering Penetration Testing Malware 83

Penetration Testing

JANUARY 3, 2024

Flutter Spy Flutter Spy is a Bash-based command-line tool designed to provide insightful code analysis and data extraction capabilities from built Flutter apps with reverse engineering.

Engineering 103

Engineering Penetration Testing 103

Security Boulevard

APRIL 21, 2022

Moreover, people working in small businesses are targeted by 350% more social engineering attacks than large firms. The post What are the 5 Stages of Penetration Testing? The post What are the 5 Stages of Penetration Testing? Sounds scary, right?? So, what’s the solution to […]. appeared first on EasyDMARC.

Penetration Testing 70

Penetration Testing Social Engineering Small Business Cybercrime 70

Penetration Testing

JANUARY 2, 2024

Specifically, unlike most existing testing works mutating query predicates, GraphGenie leverages... The post GraphGenie: To detect logic bugs in graph database engines appeared first on Penetration Testing.

Engineering 90

Engineering Penetration Testing 90

Penetration Testing

APRIL 17, 2024

McAfee Labs researchers have uncovered a dangerous new variant of the Redline Stealer malware that uses clever obfuscation tactics and aggressive social engineering to trick victims and evade detection.

Penetration Testing 141

Penetration Testing Malware Social Engineering Engineering 141

Penetration Testing

NOVEMBER 27, 2023

The Chinese firm China Energy Engineering Corporation (CEEC), a leading entity in the nation’s energy and infrastructure sectors, has fallen prey to cybercriminals.

Engineering 84

Engineering Penetration Testing Ransomware Hacking 84

Penetration Testing

DECEMBER 27, 2023

In the ever-evolving landscape of container orchestration, Google Kubernetes Engine (GKE) stands as a colossus, offering scalable and efficient solutions.

Engineering 86

Engineering Penetration Testing 86

Penetration Testing

APRIL 8, 2024

Damn Vulnerable RESTaurant An intentionally vulnerable API service designed for learning and training purposes dedicated to developers, ethical hackers, and security engineers.

Penetration Testing 144

Penetration Testing Engineering 144

SecureWorld News

JUNE 28, 2020

With many organizations now planning their annual penetration tests ("pentest" for short), a change is needed in order to accommodate remote workers. It also begs what are you allowed to test versus what is now considered taboo considering end-users may be operating with their own personal equipment?

Penetration Testing 92

Penetration Testing Social Engineering VPN Phishing 92

Penetration Testing

NOVEMBER 12, 2023

Microsoft has issued a warning about the North Korean hacking group Sapphire Sleet (BlueNoroff), which is deploying a new infrastructure for impending social engineering campaigns on LinkedIn.

Social Engineering 81

Social Engineering Cryptocurrency Engineering Penetration Testing 81

Penetration Testing

FEBRUARY 19, 2024

Autodesk AutoCAD, a widely used CAD software across engineering, architecture, and manufacturing industries, has been found to contain 40 zero-day vulnerabilities.

Penetration Testing 137

Penetration Testing Architecture Manufacturing Engineering 137

Penetration Testing

MARCH 17, 2024

Autodesk, a leader in the design and engineering software industry, has released critical security updates for several popular applications.

Software 125

Software Penetration Testing Engineering 125

Penetration Testing

MARCH 9, 2024

This group epitomizes the potent intersection of social engineering prowess and rapid technology... The post Muddled Libra Threat Group: A Formidable Threat to the Modern Enterprise appeared first on Penetration Testing.

Penetration Testing 106

Penetration Testing Social Engineering Engineering Technology 106

Penetration Testing

FEBRUARY 20, 2024

CrimsonEDR CrimsonEDR is an open-source project engineered to identify specific malware patterns, offering a tool for honing skills in circumventing Endpoint Detection and Response (EDR).

Penetration Testing 110

Penetration Testing Engineering Malware 110

Penetration Testing

FEBRUARY 9, 2024

A proof-of-concept (PoC) for CVE-2024-20328, a critical vulnerability in ClamAV, a popular open-source antivirus engine, that allows arbitrary code execution, was published. It is here,... The post No Click Required: PoC Available for ClamAV Command Injection Bug (CVE-2024-20328) appeared first on Penetration Testing.

Penetration Testing 111

Penetration Testing Antivirus Engineering 111

Penetration Testing

DECEMBER 15, 2023

The blog title”Deep Dive: Qualcomm MSM & ARM Mali Kernel 0-day Exploit Attacks of October 2023″ by Zero Day Engineering Insights, authored by Alisa Esage, delves into five kernel vulnerabilities in Qualcomm chipsets and... The post Researcher details 5 zero-day flaws in Qualcomm chipsets & ARM Mali GPU appeared first (..)

Penetration Testing 95

Penetration Testing Engineering 95

Penetration Testing

APRIL 25, 2024

By mimicking legitimate websites and using fraudulent search engine optimization (SEO) tactics,... The post Beware of Search Results: Hackers Using Fake Websites to Spread Malware appeared first on Penetration Testing.

Penetration Testing 60

Penetration Testing Malware Engineering 60

Penetration Testing

JANUARY 31, 2024

Developed by Trustwave’s SpiderLabs, this open-source web application firewall (WAF) engine supports Apache, IIS, and Nginx. It’s... The post CVE-2024-1019: Exposing ModSecurity’s Critical WAF Bypass Flaw appeared first on Penetration Testing.

Penetration Testing 109

Penetration Testing Firewall Cyber threats Engineering 109

Penetration Testing

MARCH 23, 2024

It has also proven useful for people trying their luck at the cracking... The post toolkit: The essential toolkit for reversing, malware analysis, and cracking appeared first on Penetration Testing.

Penetration Testing 145

Penetration Testing Malware Engineering 145

Penetration Testing

JANUARY 5, 2024

In the intricate world of Android application development, tools like Apktool have been indispensable for developers and reverse engineers.

Penetration Testing 104

Penetration Testing Engineering 104

Penetration Testing

JANUARY 9, 2024

The AI Engine plugin, a popular AI-related WordPress plugin with over 50,000 active installations, recently experienced a significant security vulnerability.

Penetration Testing 106

Penetration Testing Engineering 106

Penetration Testing

MARCH 6, 2024

A Cybereason Security Services analysis uncovers a sophisticated infostealer campaign that leverages GitHub, GitLab, Telegram, and common social engineering tactics to compromise victims.

Penetration Testing 86

Penetration Testing Social Engineering Engineering Malware 86

Penetration Testing

FEBRUARY 22, 2024

Researchers at Talos and CERT.NGO have pulled back the curtain on new malicious components deployed by the notorious Turla APT group, exposing a sophisticated web of tools engineered for stealthy intrusion.

Penetration Testing 90

Penetration Testing Engineering Malware 90

Penetration Testing

FEBRUARY 7, 2024

Recently, Cisco revealed critical vulnerabilities lurking within ClamAV, a widely used open-source antivirus engine.

Penetration Testing 111

Penetration Testing Antivirus Engineering 111

Penetration Testing

FEBRUARY 19, 2024

A significant security vulnerability (CVE-2024-22030) has been identified in Rancher, the popular Kubernetes management platform, and its associated Fleet engine.

Penetration Testing 90

Penetration Testing Engineering 90

Penetration Testing

FEBRUARY 26, 2023

is a Bash script that makes reverse engineering Android apps easier, automating some repetitive tasks like pulling, decoding, rebuilding, and patching an APK. releases: makes reverse engineering Android apps easier appeared first on Penetration Testing. Features apk.sh

Engineering 40

Engineering Penetration Testing 40

NopSec

AUGUST 9, 2022

Once you’ve started a vulnerability scanning system , you may want to take the next step in identifying vulnerabilities: penetration testing, commonly referred to as pentesting. The Basics of Penetration Testing Pentesting can be as broad or narrow as the client wishes. This more closely simulates an actual cyber attack.

Penetration Testing 40

Penetration Testing Wireless Risk Social Engineering 40

Penetration Testing

MARCH 10, 2024

The attackers are leveraging a GitHub vulnerability and search engine optimization (SEO)... The post GitHub Vulnerability and SEO Manipulation Facilitate Game Cheat Malware Distribution appeared first on Penetration Testing.

Penetration Testing 77

Penetration Testing Malware Engineering 77

Penetration Testing

FEBRUARY 13, 2024

TInjA – the Template INJection Analyzer TInjA is a CLI tool for testing web pages for template injection vulnerabilities. It supports 44 of the most relevant template engines (as of September 2023) for eight different programming languages.

Penetration Testing 75

Penetration Testing Engineering 75

Penetration Testing

FEBRUARY 7, 2024

CNAPPgoat CNAPPgoat is a multi-cloud, vulnerable-by-design environment deployment tool – specifically engineered to facilitate practice arenas for defenders and pentesters.

Penetration Testing 56

Penetration Testing Engineering 56

Penetration Testing

DECEMBER 19, 2023

Sophos X-Ops is warning the hospitality industry that the “Inhospitality” malspam campaign represents a cunning blend of social engineering and malware, specifically targeting the hospitality industry.

Penetration Testing 90

Penetration Testing Social Engineering Engineering Malware 90