Demo
Learn how Cobalt’s Pentest as a Service (PtaaS) model makes you faster, better, and more efficient.
Demo
Learn how Cobalt’s Pentest as a Service (PtaaS) model makes you faster, better, and more efficient.

Pentester Guides (9)

A Pentester’s Guide to Server Side Request Forgery (SSRF) cover image

A Pentester’s Guide to Server Side Request Forgery (SSRF)

What is SSRF? In a Server-Side Request Forgery (SSRF) attack, the attacker can abuse functionality on the server to...
Cobalt Core Pentester Guides
Oct 1, 2020
Est Read Time: 4 min
Read more
A Pentester’s Guide to SQL Injection (SQLi) cover image

A Pentester’s Guide to SQL Injection (SQLi)

This blog will be one of many created alongside our Hacking How-To series, an educational video series around everyday...
Cobalt Core Pentester Guides
Sep 17, 2020
Est Read Time: 5 min
Read more

Pentest Workflow — Leveraging Community-Powered Tools

As a pentester, I like to look for ways to leverage automation so I can focus my efforts on bugs that are hard to...
Pentester Guides
Apr 14, 2020
Est Read Time: 3 min
Read more

Anatomy of Authentication Tests

Introduction Authentication, as OWASP states, is the process of verifying that an individual, entity, or website is who...
Pentester Guides
Mar 5, 2020
Est Read Time: 4 min
Read more
The Anatomy of Deserialization Attacks

The Anatomy of Deserialization Attacks

What is Deserialization? Serialization is the process of turning some object into a data format that can be restored...
Pentester Guides
Jan 23, 2020
Est Read Time: 7 min
Read more

Understanding the Anatomy of an Attack

Notable, high-impact security breaches sadly make regular headlines. You might be tempted to dismiss the latest as just...
Pentester Guides
Nov 21, 2019
Est Read Time: 9 min
Read more

How to Scope a Network Penetration Test: Tips from an Expert Pentester

During a network pentest engagement, time is of the essence. A penetration tester has a fixed amount of time, typically...
Pentester Guides
Oct 3, 2019
Est Read Time: 4 min
Read more

A Pentester’s Favorite Vulnerability Scanning Tools

It’s important to note that a vulnerability scan is not a pentest. Automation isn’t a bad thing, it’s actually...
Pentester Guides
Sep 27, 2019
Est Read Time: 3 min
Read more

Is Your Serverless App Secure?

In the past few months, I’ve hosted several sessions on serverless security for serverless developers and DevOps folks....
Pentester Guides
Aug 6, 2019
Est Read Time: 4 min
Read more
    6 7 8 9 10
    Flying Bug Image