Embarking on the cybersecurity journey often feels like navigating a complex maze, where different training environments beckon enthusiasts with promises of skill enhancement. While Capture The Flag (CTF) competitions have long been hailed as a dynamic battlefield for honing practical skills, the emergence of CyberRanges adds a new layer to ...
Nessus and Nmap are some of the most popular tools used by both penetration tester and network administrators. Therefore, whenever I do a beginner penetration test, my students always ask me are Nmap and Nessus are the same? Nmap and Nessus are not the same. Nmap is an open-source tool, ...
Vulnerability scanners are one of the most important tools for both security experts and developers. With the rise in the complexity of software developed around the world, using these tools to automate the process of finding some types of vulnerabilities is becoming necessary. Vulnerability scanners usually use the same techniques ...
Performing a penetration test against your mobile application is becoming an important task for higher security. Unfortunately, performing a penetration test without following a well-defined methodology could waste time without giving an optimum result for you. Therefore, here are the different steps for the mobile application penetration testing methodology: Preparation ...
Fixing the discovered vulnerabilities after receiving the penetration test report is the most important process and the most time-consuming process. Therefore, one of the most common questions I get from my clients before they start the fixing process is can I keep my website online while fixing the vulnerabilities? The ...
Cloud infrastructure is becoming more and more used by companies around the world. Therefore, performing a penetration test against your own cloud infrastructure or your client’s cloud is becoming so important to comply with the regulations. So, here is a cloud penetration testing methodology: CSP Contract checking (verify that the ...
Cloud networks are become more and more used by companies. Most companies start to merge their local network to a cloud version either totally or at least partially. Hybrid use of cloud computing is the new trend in IT. Being asked to perform a penetration test against a cloud network ...
Performing a penetration test against an API is very similar to performing a penetration test against a web application. Both applications use web technologies and have basically the same type of vulnerabilities. However, an API does not always offer a user interface to communicate which makes testing it more difficult. ...
Penetration testing is not yet a mature field like software development or network configuration. Just ten years ago, finding structured information about how you can perform penetration testing was really difficult. Fortunately, in the last few years, a good number of penetration testing books were created by the community which ...