Ethical hacking & pentesting blog

Come for the PoCs and security research focused on new CVEs and stay for the ethical exploitation guides and how-tos our offensive security specialists create.

How to do a full website vulnerability assessment with Pentest-Tools.com

As a pentester, I have a good day when my workflow is smooth and uninterrupted. Pushing routine tasks to the background (sweet automation!) helps me stay focused. It frees up my mind to work on interesting findings and attack sequences that not everyone can see. Plus, it feels good to be productive and get stuff done!

Author(s)

Daniel Bechenea

Published at: 31 Mar 2021

Run laser-focused scans with these 5 platform updates

This month we roll out 5 fresh updates worth trying. Why?

Author(s)

Ioana Rijnetu

Published at: 22 Mar 2021

How to detect injection flaws with Pentest-Tools.com

Whether you’re a penetration tester, bug bounty hunter, or security pro, you’re probably familiar with all the OWASP Top 10 vulnerabilities affecting web applications.

Author(s)

Cristian Cornea

Published at: 19 Mar 2021

4 platform updates you need to know about

It’s been an intense start to the New Year and we’re excited to share what we worked on! These 4 platform improvements are all about streamlining your workflow, so you can focus on the important tasks.

Author(s)

Ioana Rijnetu

Published at: 21 Feb 2021

Why Pentest Robots are rocket fuel for pentesters, not their replacement

Let me say this from the start: full automation is the wrong approach for scaling penetration testing. The whole “machines will replace humans” view doesn’t sit well with us. It’s too simplistic and it fails to capture the complexity and depth involved in security testing and the larger information security ecosystem. So how come we launched pentest robots - an automation feature - at Black Hat Europe 2020?

Author(s)

Andra Zaharia

Published at: 10 Dec 2020

Work like a pro: 4 automation updates to save time and simplify your workflow

We worked hard this month to roll out new updates and we’re excited to share them with you! These 4 platform features are all about making your workflow smoother, so you can focus on the essential tasks:

Author(s)

Ioana Rijnetu

Published at: 17 Nov 2020

Discover how dangerous a ‘Bad Neighbor’ can be - TCP/IP Vulnerability (CVE-2020-16898)

Patching is never easy, but doing it imperfectly can come back to bite you. That’s why today we’re unpacking a vulnerability that can resurface when improperly mitigated.

Author(s)

Cristian Cornea

Published at: 03 Nov 2020

Work smarter, not harder: 5 updates to enhance automation

It’s been an intense month and we’re excited to share the news! These 5 platform improvements are all about saving you time and energy, so you can focus on your most important tasks.

Author(s)

Ioana Rijnetu

Published at: 26 Oct 2020

Why Zerologon is the silent threat in your network

No red flags. No alerts. Full-on compromise. The way cybercriminals are putting together various vulnerabilities within the Microsoft infrastructure, including Zerologon vulnerability (CVE-2020-1472), is more than a trending topic in the infosec community. It’s a massive threat for organizations small and large.

Author(s)

Cristian Cornea

Published at: 21 Oct 2020

Why we continue to support young people find their way in infosec

Lifelong learning, constant practice, and the need to share knowledge and ideas with others are the reasons that got us in the infosec community. Because we all try to do our best in the work we do and have a positive impact on our field. And for that, we need to remind ourselves to stay engaged and always practice what we preach.

Author(s)

Ioana Rijnetu

Published at: 15 Oct 2020

4 updates for next-level automation in security testing

Here are 4 platform improvements we’ve deployed to make Pentest-Tools.com a must-have for your security testing tool stack: Mark False Positives for future scans, Target description - automatically added to reports, Enable & configure email scan notifications, Login session timeout increased

Author(s)

Ioana Rijnetu

Published at: 05 Oct 2020

[New feature] Discover your Network’s Attack Surface

What if you could automatically… Get an instant overview of your network perimeter exposure? Find open ports that shouldn’t be publicly accessible at a glance? Detect old and forgotten web technologies from a centralized view?

Author(s)

Ioana Rijnetu

Published at: 18 Sep 2020

Get vulnerability research & write-ups

In your inbox. (No fluff. Actionable stuff only.)

Discover our ethical hacking toolkit and all the free tools you can use!

Create free account