Network Penetration Testing: Essential Tips from a Seasoned Pen Tester
Network Penetration Testing: Essential Tips from a Seasoned Pen Tester November 28, 2023 Informational Srishti Chopra Penetration testing, often referred to as pen testing, is a critical component of any organization’s cybersecurity strategy. It involves simulating real-world cyber attacks to evaluate the security of a system, network, or application. The primary goal is to uncover […]
Exploiting Weak ACLs on Active Directory Certificate Templates: ESC4
Exploiting Weak ACLs on Active Directory Certificate Templates: ESC4 November 23, 2023 Active Directory Gaurav Choudhari In Active Directory (AD) security, one area that has been gaining attention is the exploitation of misconfigured Active Directory Certificate Services (ADCS) and, in particular, weak access control lists (ACLs) on certificate templates. These vulnerabilities can lead to domain […]
A Guide to Pen Testing in the Azure AD Environment
A Guide to Pen Testing in the Azure AD Environment November 22, 2023 Informational Srishti Chopra Azure Active Directory (Azure AD) is a cloud-based identity and access management service provided by Microsoft. It plays a vital role in the Azure environment, serving as the cornerstone for authentication and authorization across Azure services. Azure AD allows […]
Web Cache Poisoning: A Comprehensive Guide to Protecting Your Website
Web Cache Poisoning: A Comprehensive Guide to Protecting Your Website November 21, 2023 Android Shashikant Prasad Web cache poisoning is a sophisticated attack. It targets the caching system of a browser, leading to the delivery of stale or outdated content to unsuspecting users. In this comprehensive guide, we will discuss the intricacies of web cache […]
7 Essential Steps for an Effective Yearly Penetration Testing Plan
7 Essential Steps for an Effective Yearly Penetration Testing Plan June 19, 2024 Informational Srishti Chopra Embarking on a journey to fortify your digital defences against cyber threats requires a well-crafted and comprehensive yearly penetration testing plan. In this blog, we’ll explore the seven essential steps that form the backbone of an effective strategy to […]
Cross-Site Request Forgery (CSRF) for Pen Testers
Cross-Site Request Forgery (CSRF) for Pen Testers November 16, 2023 Informational Srishti Chopra As Pen Testers, one of our main roles are identifying and mitigating vulnerabilities that could lead to security breaches. Cross-Site Request Forgery (CSRF) attacks often go undetected but have severe repercussions if left unaddressed; we will explore this attack type further in […]
