Vulnerability Management & Penetration Testing

The Critical Need for Multi-Role Testing in Application Security

The Critical Need for Multi-Role Testing in Application Security

| | Application Security, AppSec, Cybersecurity, Penetration Testing, Security Awareness & Education, Vulnerability Management & Penetration Testing
As web, thick client, mobile, and IoT applications have become more robust, authentication and authorization has become an incredibly complex […] ...
The Guiding Point | GuidePoint Security
Examining the Difference Between CTEM and Vulnerability Management

Examining the Difference Between CTEM and Vulnerability Management

| | Blog, CTEM, Vulnerability Management, Vulnerability Management & Penetration Testing
I’ve recently been fielding this question in my conversations with customers: “What is the difference between CTEM and Vulnerability Management?”  One […] ...
The Guiding Point | GuidePoint Security
How Hackers Steal Your RFID Cards

How Hackers Steal Your RFID Cards

| | Blog, Cybersecurity, Red Team, RFID, Security Awareness & Education, Technical, Threat & Attack Simulation, Vulnerability Management & Penetration Testing
Radio Frequency Identification (RFID) cards are ubiquitously used to authenticate using a physical token. This technology is often embedded in […] ...
The Guiding Point | GuidePoint Security
How to Make Adversaries Cry: Part 1

How to Make Adversaries Cry: Part 1

| | Blog, Cybersecurity, Technical, Threat & Attack Simulation, Vulnerability Management & Penetration Testing
In the ever-evolving landscape of cybersecurity, defense against intruders requires constant vigilance and proactive measures. For organizations relying on Active […] ...
The Guiding Point | GuidePoint Security
SCCM Exploitation: Evading Defenses and Moving Laterally with SCCM Application Deployment

SCCM Exploitation: Evading Defenses and Moving Laterally with SCCM Application Deployment

| | Blog, Cybersecurity, Penetration Testing, Threat & Attack Simulation, vulnerability, Vulnerability Management & Penetration Testing
TL;DR: Compromise of an SCCM administrator account can easily lead to compromise of every machine managed by SCCM. As this […] ...
The Guiding Point | GuidePoint Security
Leveraging Escalation Attacks in Penetration Testing Environments – Part 1

Leveraging Escalation Attacks in Penetration Testing Environments – Part 1

| | Blog, Cybersecurity, Technical, Vulnerability Management & Penetration Testing
Authors: George Raileanu and Eugene Mar Introduction Together we aim to explore vulnerabilities within Active Directory Certificate Services (AD CS), […] ...
The Guiding Point | GuidePoint Security
Introduction to tmux

Leveraging Escalation Attacks in Penetration Testing Environments – Part 2

| | Blog, Cybersecurity, Technical, Vulnerability Management & Penetration Testing
Authors: George Raileanu and Eugene Mar In this post, we’ll cover the two most common ESC attacks we encounter on […] ...
The Guiding Point | GuidePoint Security
The Art of Self-Defense: Security Validation Through Attack Simulation

The Art of Self-Defense: Security Validation Through Attack Simulation

| | BAS, BAS as a Service, Blog, Cybersecurity, Threat & Attack Simulation, Vulnerability Management & Penetration Testing
Additional authors: Nic Finn Setting the Stage Organizations looking to develop an increasingly proactive defensive strategy are beginning to incorporate […] ...
The Guiding Point | GuidePoint Security
Beyond the Basics: Exploring Uncommon NTLM Relay Attack Techniques

Beyond the Basics: Exploring Uncommon NTLM Relay Attack Techniques

| | Blog, Cybersecurity, Threat & Attack Simulation, Vulnerability Management & Penetration Testing
NTLM (NT LAN Manager) relaying is an attack technique that has been around for years yet is still incredibly effective.  […] ...
The Guiding Point | GuidePoint Security
SCCM Exploitation: Compromising Network Access Accounts 

SCCM Exploitation: Compromising Network Access Accounts 

| | Blog, Cybersecurity, Penetration Testing, pentesting, SCCM, Security Research, Threat & Attack Simulation, Vulnerability Management & Penetration Testing
Authors: Marshall Price and Connor Dowling TL;DR: SCCM Network Access Accounts (NAA) are frequently used despite being associated with several […] ...
The Guiding Point | GuidePoint Security
Load more