Do you have vulnerabilities that you just love to exploit? I know I have a few and one of them is web cache deception. Is
Security Source Code Review – Manual Approaches
Performing security source code reviews is part of the penetration tester’s life. Either that this is the whole scope of an engagement or you exfiltrated
Active Directory – Delegation Based Attacks
What is Kerberos delegation? As stated by Microsoft, “delegation is one of the most important security features of Active Directory Domain Services. Delegation enables a
Pentesting Azure: RECON Techniques
Even though Microsoft Azure is the second largest cloud solution after Amazon Web Services (AWS) from a market share perspective, it should be noted that
IoT Pentesting 101: How to Hack MQTT – The Standard for IoT Messaging
Pentesting IoT MQTT protocol on emulated environment deployed using mosquitto. Dictionary attacks, DoS, or exploiting dummy ICS Environments are presented.
Gone Phishing – Part #1
The term “social engineering” refers to a wide range of malicious activities carried out through human interactions.It employs psychological manipulation to dupe users into making
Security Café 