by Jordan Drysdale and Kent Ickler tl;dr: BHIS does a lot of penetration testing in both traditional and continuous penetration testing (CPT) formats. This top ten style list was derived [β¦]
The post The Top Ten List of Why You Got Hacked This Year (2023/2024)Β appeared first on Black Hills Information Security, Inc..
The new year has begun, and as a penetration tester at Black Hills Information Security, one thing really struck me as I reflected on 2023: a concerningly large number of [β¦]
The post Revisiting Insecure Direct Object Reference (IDOR) appeared first on Black Hills Information Security, Inc..
Isaac Burton // For as long as we have known about prototype pollution vulnerabilities, there has been confusion on what they are and how they can be exploited. Weβre going [β¦]
The post Hit the Ground Running with Prototype PollutionΒ Β appeared first on Black Hills Information Security, Inc..
Job hunting? Looking for a career change? Still in college and want to know how to get started now in your career? If you answered yes to any of these [β¦]
The post Webcast: How to Hunt for Jobs like a Hacker appeared first on Black Hills Information Security, Inc..
Justin Angel // Penetration testing and red team engagements often require operators to collect user information from various sources that can then be translated into inputs to support social engineering [β¦]
The post Collecting and Crafting User Information from LinkedIn appeared first on Black Hills Information Security, Inc..
In this BHIS podcast, originally recorded as a live webcast, we cover some new techniques and tactics on how to track attackers via various honey tokens.Β We cover how to [β¦]
The post BHIS PODCAST: Tracking attackers. Why attribution matters and how to do it. appeared first on Black Hills Information Security, Inc..
Jordan Drysdale // tl;dr Cisco Smart Install is awesome (on by default)β¦for hackersβ¦ not sysadmins. So, you Nessus too? Criticals and highs are all that matter! Right??? Until this beauty [β¦]
The post Cisco Smart Installs and Why Theyβre Not βInformationalβ appeared first on Black Hills Information Security, Inc..
Scott Worden* // So you and your company had a pen testβ¦now what? What to do, how to plan, and good SQUIRREL! ways to stay on track. Β The 3 [β¦]
The post What to Expect After a Pen Test appeared first on Black Hills Information Security, Inc..
David Fletcher// The following blog post is meant to expand upon the findings commonly identified in BHIS reports. Β The βServer Supports Weak Transport Layer Security (SSL/TLS)β is almost universal across [β¦]
The post Finding: Server Supports Weak Transport Layer Security (SSL/TLS) appeared first on Black Hills Information Security, Inc..
David Fletcher// The weak password policy finding is typically an indicator of one of two conditions during a test: A password could be easily guessed using standard authentication mechanisms. A [β¦]
The post Finding: Weak Password Policy appeared first on Black Hills Information Security, Inc..
Login