Virtue Security

A New York penetration testing provider. Taking a creative approach to web and mobile application security. Specializing in #pentesting #fintech #HealthIT #aws

[Virtue Security @VirtueSecurity]

In case you missed AppSec USA last fall, here's the re-recording of Nick Coblentz's talk on Kubernetes pentesting. Also released here was Virtuekube a powerful framework to help test complex multi-tenant k8s environments.

https://t.co/VgSizkCUel

[Virtue Security @VirtueSecurity]

New to #pentesting? Here's some must-have fundamentals for testing authenticated web-based applications.

https://t.co/yAtOKSkUkE

[Virtue Security @VirtueSecurity]

Interested in API penetration testing? Here's a review of some technical concepts before you perform them: https://t.co/5Lbc5greEV

[Virtue Security @VirtueSecurity]

We've launched an online scanner to identify S3 bucket misconfigurations. Useful for #AWS #pentesting https://t.co/XrYLgysWxF

[Virtue Security @VirtueSecurity]

Benign behaviors can create big risk in application security. The Referer header is a frequent culprit of information disclosure: https://t.co/zBeI3D7clL #AppSec #pentesting

[Virtue Security @VirtueSecurity]

Some ins and out for pentesting DNS Dynamic Record Updates: https://t.co/7EjHwzkIOZ #pentesting

[Virtue Security @VirtueSecurity]

Small kb update for a Responder / MultiRelay cheatsheet.
https://t.co/nltFgcOQFv #Pentesting

[Virtue Security @VirtueSecurity]

Pentesting on AWS? Check out our guidance for 2021 on considerations for pentesting AWS workloads. https://t.co/apsXxCIZu5 #aws #pentesting

[David Rowe @davidprowe]

Bloodhound in Docker in a Browser. Oh My
https://t.co/BaplqyYWe5

[Virtue Security @VirtueSecurity]

Pentesting with Unicode - and how to phish any Chrome, Outlook, or Thunderbird user: https://t.co/ciMHfwuR2C #redteam #pentesting

[Virtue Security @VirtueSecurity]

URL Redirection - How to identify and remediate vulnerabilities #appsec #pentesting https://t.co/bJPigJLSWY

[Virtue Security @VirtueSecurity]

If you're looking to start pentesting on iOS we've written a guide to jailbreak iOS 13 with #Unc0verjailbreak : https://t.co/BVWJB3BnIe #appsec #ios13

[Virtue Security @VirtueSecurity]

Wkhtmltopdf is a great utility for rendering PDFs and disclosing your AWS credentials https://t.co/s5MOSt3hwl #appsec #redteam

[Virtue Security @VirtueSecurity]

Howto: harden your S3 buckets with IAM and KMS https://t.co/5hSmuw3NTu #AWS #devops #devsecops

[Virtue Security @VirtueSecurity]

Some basic but important tips for using Wireshark in penetration tests. #redteam #pentesting #security https://t.co/KvI9A3WzDg

[Virtue Security @VirtueSecurity]

We've released a new microservice to continuously poll and collect data from vulnerable Cisco PIX routers: https://t.co/UgWxnPg8Zx #redteam #pentesting #benigncertain

[Virtue Security @VirtueSecurity]

Take your redteaming to the next level with better AV evasion. Here's a quick guide for encoding and packaging meterpreter payloads to avoid most antivirus products: https://t.co/2x7Q7l4Ga0

[Virtue Security @VirtueSecurity]

Running nmap on your @Airbnb network is a great way to find hidden cameras and remind yourself you need to improve your posture.🤦‍♂️

[Virtue Security @VirtueSecurity]

New Blog Post: Tale of a Wormable Twitter XSS
https://t.co/F6jeORgPMl
#infosec #xss #bugbounty

[Virtue Security @VirtueSecurity]

DevOps security: securing Travis CI credentials https://t.co/y49RVMW1Lo #devops