I really don't like how pentesters' team work is organized these days. It's just chat+unstructured project data in txt files.
Zero true teammate collaboration. So, I've spent the last few months solving the problem. Check it out:Hive - self-hosted pentest collaborative platform!
Overwhelmed by the number of supply chain security vendors? ๐
Here's a detailed breakdown of 20+ vendors across:
* Securing source code access and CI/CD pipelines
* SCA
* Malicious dependencies
* Container security
* SBOMs
* Code provenance
and more!
It was great collaborating with @InvestiAnalyst on this, hope it's useful!
Played around with ChatGPT for pentest reporting.
Still a long way from making us unemployed anytime soon. But yeah! It can speed up a boring routine๐บ
How to automate pentest reporting with Chat GPT?
With just a button click, you can now quickly generate descriptions or risks of issues or any other report content, making the process more efficient and less time-consuming.
Keep an eye on updates
https://t.co/55WuGN0V5K
The ability to look at the entirety of a situation to see the bigger picture is critical, especially for application security.
What's the point of audits if all the vulnerabilities found remain in 50-page pentester reports or ci/cd Pipeline artifacts?
https://t.co/eWfS1havU2
Take a peek at how convenient it is now to merge the same issues in Hexway Hive.
We love making the work of pentesters more pleasant with each new release.
https://t.co/aoI7wUv24U
What if we say that @_hexway can be MORE adaptive?
Yeah, it's not just you can pick a name or something. Next Hive update will bring you a little bit more flexibility in your pentest workflow.
Soon.
#hexway#PTaaS#penetrationtesting#pentest
@clintgibler @0xCaptainFreak Not sure that Jira is good for Vuln Management.
Interesting how you guys(@0xCaptainFreak) handle issues deduplication problem?
People love dashboards, don't they? We've implemented a special view in Hive that displays pentest project summary (scope, services, ports, most vulnerable hosts, etc).
Hey-Hey!
We know you love @Burp_Suite (we too). But it's really hard to collaborate, share results in it and see the full picture when you work as a team.
We're trying to solve that problem! Soon, we're going to release something very interesting!
https://t.co/UaBNwW5XPY
Hey!
We've developed a tool, that enables pentest service providers to offer Penetration Testing as a Service (PTaaS) out of the box!
Meet - Hexway Apiary!
Now you can deliver your pentests faster and turn One-Time Customers into Lifetime Customers
https://t.co/MPxTCR1xme
The short story about how we used Clubhouse as a social engineering tool to find out more about our client's employees during RedTeam testing
https://t.co/vVHiCvFek2
@payloadartist Hey! I did a port scan of these assets and uploaded the results to https://t.co/9sHRY993m9.
Much easier to analyze what apple has in the scope. Happy hunting!
Hey!
Need a tool to collaborate and analyze the scope(nmap, nessus,etc),reportgen during a pentest or bb,but it's too tedious to install something(oh you)?
I have a solution for you:https://t.co/9sHRY993m9
Free,easy-to-use,and with cat pictures inside. Well,what else do you need?