Insights from Pentest

Pentest Insights

We’re here to support your cybersecurity improvement efforts and to deliver long-term value to your organisation. Our insights provide you with the latest thought provoking articles from the team here at Pentest.

JSON Web Tokens – Algorithm Confusion Attack - Pentest Insight

JSON Web Tokens – Algorithm Confusion Attack

Understanding SSRF Threats - Pentest Insight

Trust in Applications is a Luxury – Understanding SSRF Threats

DNSSEC - Pentest Insight

DNSSEC: the quickest win in Cyber Security?

An insight into GraphQL vulnerabilities - Pentest Insight

An Insight Into GraphQL Vulnerabilities

Cracking Passwords - Pentest Insight

Cracking Passwords

Parameter Tampering in WebSockets - Pentest Insight

Parameter Tampering in WebSockets

Client Portals - Pentest Insight

Client Portals – Why We Don’t Use Them (Yet)

Preparing for your pen test - Pentest Insight

Preparing For Your Pen Test

Active Directory Certificate Services – Misconfigurations & Recommendations - Pentest Insight

Active Directory Certificate Services – Misconfigurations & Recommendations

Too much info - Pentest Insight

Are you sharing too much information?

Dependency Confusion - Pentest Insight

Utilising Dependency Confusion to Conduct Software Supply Chain Attacks

Securing Access Controls in Web Applications & APIs - Pentest Limited - Insight

Securing Access Controls in Web Applications & APIs

Phishing - going beyond the click | Pentest Limited

Phishing – going beyond the click

Dangers of JSON Web Tokens for Session Management - Pentest Insight

The Dangers of Using JSON Web Tokens for Session Management

Prudent Feature for Password Managers

A Prudent Feature for Password Managers

Understanding attacks using the Cyber Kill Chain - Pentest Limited

Understanding attacks using the Cyber Kill Chain

Keeping tenants safe in the cloud - Pentest Insight

Keeping Tenants Safe in the Cloud

Targeting your technology stack - Pentest

Who is targeting your technology stack?

Securing Web-Based AI Chatbots

Securing Web-Based Artificial Intelligence (AI) Chatbots

Pentest Pwn2Own Toronto success 2023 banner

Success at Pwn2Own Toronto 2023

Rethink Cybersecurity Wisdom | Pentest

Rethinking Cybersecurity Wisdom

Is it time to re-evaluate phishing education | Pentest Limited

Is it time to re-evaluate phishing education?

Don't Hold Back Information | Pentest Limited

Don’t hold back – The Power of Information sharing during testing

AI & Cyber Defence

Artificial Intelligence (AI) & Cyber Defence

Pentest - Common High Risk Issues

Understanding common high-risk web application issues

Where does your information security confidence come from | Pentest Limited

Where does your security confidence come from? And is it enough?

Pwn2Own Toronto 2022 - Hacking the Samsung s22

Pwn2Own Toronto 2022 – Hacking the Samsung s22

Penetration testing in compliance | Pentest Limited

Penetration testing in compliance

Cyber Security Perspectives - Stephen Ball (Former CEO of HMGCC & Lockheed Martin UK) | Pentest Limited

Cybersecurity Perspectives – Stephen Ball (Former CEO of HMGCC & Lockheed Martin UK)

Success at Pwn2Own Austin 2021 & Miami 2022 | Pentest Limited

Success at Pwn2Own Austin 2021 & Miami 2022

Information security improvement - it's all in the mindset | Pentest Limited

Information security improvement – it’s all in the mindset

Don't leave security until the last minute (or even later) | Pentest Limited

Don’t leave security until the last minute (or even later)

Security and the supply chain | Pentest Limited

Security and the supply chain

Evolving cyber operations to reflect real world threats | Pentest Limited

Evolving cyber operations to reflect Real World Threats

Sometimes it pays to assume the worst | Pentest Limited

Sometimes it pays to assume the worst

Acting responsibly in Cyber Space - Marcus Willett CB OBE (Ex GCHQ Director of Cyber) | Pentest Limited

Acting responsibly in Cyber Space – Marcus Willett CB OBE (Ex GCHQ Director of Cyber)

Supporting those who support us all – R;pple Suicide Prevention | Pentest Limited

Supporting Ripple Suicide Prevention

Hack-A-Sat 2: The second small step for Pentest | Pentest Limited

Hack-A-Sat 2: The second small step for Pentest

Red teaming – for whose eyes only? | Pentest Limited

Red teaming – for whose eyes only?

Get the best from your test | Pentest Limited

Get the best from your test

There are no fads or shortcuts when it comes to information security | Pentest Limited

There are no fads or shortcuts when it comes to information security

A red team doesn’t have to be complicated | Pentest Limited

A red team doesn’t have to be complicated

Supporting those who support us all – Action for Children | Pentest Limited

Supporting those who support us all – Action for Children

The (Remote) Road to Pwn2Own Tokyo 2020 | Pentest Limited

The (Remote) Road to Pwn2Own Tokyo 2020

Supporting those who support us all – The Brain Tumour Charity | Pentest Limited

Supporting those who support us all – The Brain Tumour Charity

Getting your IT house in order | Pentest Limited

Getting your IT house in order

Are you open to ethical disclosure? | Pentest Limited

Are you open to ethical disclosure?

Password policy recommendations | Pentest Limited

Password policy recommendations

How can security testing fit within agile development? | Pentest Limited

How can security testing fit within agile development?

Supporting those who support us all – Coronagenes Study, University of Edinburgh | Pentest Limited

Supporting those who support us all – Coronagenes Study, University of Edinburgh

What’s the difference between vulnerability scanning and penetration testing? | Pentest Limited

What’s the difference between vulnerability scanning and penetration testing?

Internal infrastructure test to take away? | Pentest Limited

Internal infrastructure test to take away?

Supporting those who support us all – Xploro | Pentest Limited

Supporting those who support us all – Xploro

I Like to Watch - Hack-A-Sat CTF Solution | Pentest Limited

I Like to Watch – Hack-A-Sat CTF Challenge Solution

One small step for Pentest – Hack-A-Sat CTF | Pentest Limited

One small step for Pentest – Hack-A-Sat CTF

Latest research from Pentest

iOS Mobile Application Security | Pentest Limited

iOS Mobile Application Security – What Does Your Attack Surface Look Like?

Android Security Exposure | Pentest Limited

Android Mobile Application Security – Understanding Your Exposure

Pentest - Research - RPC

Researching Remote Procedure Call (RPC) vulnerabilities

Looking for an insight into your cybersecurity?

Get in touch with our experienced team and find out more about how we can help you obtain the cybersecurity confidence you require.

/contact Us

/connect

/services

/about

/links

Pentest Limited is registered in England and Wales with company number 11925182

Registered address: 22 Great James Street, London, WC1N 3ES

VAT registration No: 331802826

© 2019 - Present. Pentest Limited. All rights reserved.