TrustFoundry

Penetration Testing

[TrustFoundry @Trust_Foundry]

🚀 New Research Drop + Free Tool Release! 🚀

Do you use PDQ deploy/inventory? Did you know that misconfigured PDQ environments can often lead to serious data exposure?

Our very own @_inspir3d has published research and a tool here:

https://t.co/pQHM7JSaE5

[TrustFoundry @Trust_Foundry]

Are you combining AS-REPRoasting with Kerberoasting yet?

In this latest post, Thomas Fieber walks through a creative approach that lets you Kerberoast without needing valid credentials, by chaining these two classic attacks together.

https://t.co/qkEIVOQQuR

[TrustFoundry @Trust_Foundry]

This weekend, one of our consultants Ana Batranovic entered the all women Wicked6 CTF competition and her team (H4CK3TT3S6PWN3TT3S) won! Well done Ana!

[TrustFoundry @Trust_Foundry]

This week we bring you an article about browser exploitation! More specifically - explaining the addrof and fakeobj primitives!

Shout out to Josiah Pierce for creating this!

https://t.co/KPdFdKALuH

[TrustFoundry @Trust_Foundry]

Can you solve this week's spot the bug challenge from Josiah Pierce? We are really enjoying these in our weekly meetings!

[TrustFoundry @Trust_Foundry]

At TrustFoundry, we are always looking to challenge each other. Recently, we started doing code review challenges in our weekly meetings. Can you spot the bug?

Find out more here: https://t.co/C4U8dHF1ML

[TrustFoundry @Trust_Foundry]

Shadow Repeater could find some unique encodings you may have missed, but may also DROP you in hot water. 😉

Read our research about the recent burpsuite AI functionality

https://t.co/KhBWDaXmvA

[TrustFoundry @Trust_Foundry]

💻🚀 Exploring the World of JIT Vulnerabilities in JavaScript Engines!

Check out "A Mere Mortal’s Introduction to JIT Vulnerabilities in JavaScript Engines' by our Managing Consultant, Josiah Pierce!

📖 Read it here: https://t.co/9QZUBocXi8

#JavaScript #JIT #Hacking #AppSec

[Intigriti @intigriti]

⏰ It's CHALLENGE O'CLOCK!
👉 Pop an alert before Friday the 17th of January
👉 Win €400 in SWAG prizes
👉 We'll release a tip for every 50 likes on this tweet
Thanks @0xGodson_ for the challenge 👇
https://t.co/gN7aBi7Jls

[TrustFoundry @Trust_Foundry]

Our Consultant @0xGodson_ has recently created a challenge for the @intigriti January series! The first blood will will win a €100 swag voucher! Find the challenge here:

https://t.co/zFOuNS0Mfh

#CTF #hacking #penetrationtesting

[TrustFoundry @Trust_Foundry]

Election interference has been a hot topic in the news lately, raising critical questions about the integrity of voting systems.

Could blockchain technology be the answer to safeguarding elections?

https://t.co/A4zgA1svJK

#Blockchain #BlockchainSecurity #election

[TrustFoundry @Trust_Foundry]

Our consultant, Ethan Finn has been testing some LLMs recently and has created a blog post about prompt injection!

https://t.co/VE13F9mKSG

#LLM #promptinjection #penetrationtesting

[TrustFoundry @Trust_Foundry]

Understanding Active Directory Certificate Services: A Focus on ESC1 and ESC8 by @tomfieber
https://t.co/gqxb5n2DYq

[TrustFoundry @Trust_Foundry]

Our managing consultant Josiah Pierce has has created a blog post introducing postMessage cross-site scripting!

https://t.co/atgSoiYXQO

#XSS #crosssitescripting #penetrationtesting #Hacking

[TrustFoundry @Trust_Foundry]

This week our Managing Consultant Josiah gives his top tips to ace a technical interview for a penetration tester role

https://t.co/3UDuInDJgG

#penetrationtesting #ethicalhacking #infosec

[TrustFoundry @Trust_Foundry]

This week, we're excited to present a comprehensive guide on HTTP Security headers. Learn about their significance, the risks associated with neglecting them, and how to implement them!

https://t.co/JzcJhz6lTg

[TrustFoundry @Trust_Foundry]

One of our talented consultants recently sat the burpsuite certified security practicioner exam and he created a blog post to share his experiences!

https://t.co/SHtpuot8S7

#penetrationtesting #websecurity

[TrustFoundry @Trust_Foundry]

Our latest blog post dives into the world of session cookie security. 🔒 Discover how to safeguard your users' sessions!

https://t.co/xTCBAUebZo

#infosecurity #appsec #penetrationtesting

[TrustFoundry @Trust_Foundry]

Writing an exploit for CVE-2021-4034 (local priv esc in pkexec) https://t.co/uJDYW6q3V0

[TrustFoundry @Trust_Foundry]

Did default SameSite:Lax put the nail in the coffin for CSRF? Mostly, but not always! by @ZonkSec
https://t.co/VciosQNANq