Productive Hacking: 5 Indicators of a Quality Penetration Test
Key elements of penetration tests that actually work for you. Everyone seems to have a different idea of what a penetration test is. Does it involve phishing employees? What about [...]
Webinar: Pentest Engagement Types: A Guide to Understanding Simulated Attack Types
This webinar will define and explain common penetration test offerings in detail, outline the key differences and benefits, and help you decide which engagement type is the best fit for [...]
Webinar: Serverless Password Cracking or: How I Learned to Stop Worrying & Love AWS
Password cracking by the book is expensive, complicated and difficult to scale. Trying to crack passwords on laptops is comparatively slow and unhelpful. Investing in a rack of Nvidia graphics [...]
The Road To Better Password Cracking (Part 2)
The part where hashcat does a ton of heavy lifting. In the last post, I discussed how some simple character conversion and inferences about human behavior revealed some harrowing elements [...]
A Red Teamer’s Trip to the Doctor
The things that go through a security professional’s head during a regular doctor's visit, why they matter to the healthcare industry, and why they should matter to you. Healthcare organizations [...]
The Road to Better Password Cracking (Part 1)
Or: how I learned to stop worrying and love AWS GPU clusters. Photo by Alberto Frías on Unsplash Passwords are terrible. And I don’t mean just your Netflix password or [...]
Sudo: Its History and How to Abuse It
A quick explanation of one of the most influential and misconfigured computing utilities. A classic view into some of the tools use by pentesters at risk3sixty. You’re a [...]
So, you got a pentest. Now what?
How to progress toward a truly secure organization and infrastructure after penetration testing. You did it – you paid for penetration testing services. Whether it was to fulfill a potential [...]
Past to Present – Lessons From the NotPetya Ransomware
And how they are still relevant today. On a warm, sunny day in July 2017, one of the world’s most catastrophic and rampant demonstrations of ransomware began. Commonly referred to [...]
An Introduction to Active Defense
Global research and advisory firm, Gartner, forecasts that information security spending will exceed $124 billion in 2019, yet cyber defenses continue to fail. Organizations large and small continue to experience [...]