New KB Update: Understanding and pentesting wkhtmltopdf utilities virtuesecurity.com/kb/wkhtmltopdf…

DevOps security: securing Travis CI credentials virtuesecurity.com/kb/securing-tr… #devops

New Blog Post: Tale of a Wormable Twitter XSS virtuesecurity.com/tale-of-a-worm… #infosec #xss #bugbounty

Running nmap on your Airbnb network is a great way to find hidden cameras and remind yourself you need to improve your posture.🤦‍♂️

Take your redteaming to the next level with better AV evasion. Here's a quick guide for encoding and packaging meterpreter payloads to avoid most antivirus products: virtuesecurity.com/evading-antivi…

We've released a new microservice to continuously poll and collect data from vulnerable Cisco PIX routers: github.com/VirtueSecurity… #redteam #pentesting #benigncertain

Some basic but important tips for using Wireshark in penetration tests. #redteam #pentesting #security virtuesecurity.com/kb/essential-w…

Howto: harden your S3 buckets with IAM and KMS virtuesecurity.com/kb/protecting-… #AWS #devops #devsecops

Wkhtmltopdf is a great utility for rendering PDFs and disclosing your AWS credentials virtuesecurity.com/kb/wkhtmltopdf… #appsec #redteam

If you're looking to start pentesting on iOS we've written a guide to jailbreak iOS 13 with #Unc0verjailbreak : virtuesecurity.com/kb/jailbreakin… #appsec #ios13

URL Redirection - How to identify and remediate vulnerabilities #appsec #pentesting virtuesecurity.com/kb/url-redirec…

Pentesting with Unicode - and how to phish any Chrome, Outlook, or Thunderbird user: virtuesecurity.com/pentesting-use… #redteam #pentesting

Bloodhound in Docker in a Browser. Oh My hubs.ly/H0wVbs70

Pentesting on AWS? Check out our guidance for 2021 on considerations for pentesting AWS workloads. virtuesecurity.com/aws-penetratio… #aws #pentesting

Small kb update for a Responder / MultiRelay cheatsheet. virtuesecurity.com/kb/responder-m… #Pentesting

Some ins and out for pentesting DNS Dynamic Record Updates: virtuesecurity.com/kb/dns-server-… #pentesting

Benign behaviors can create big risk in application security. The Referer header is a frequent culprit of information disclosure: virtuesecurity.com/kb/cross-domai… #AppSec #pentesting

We've launched an online scanner to identify S3 bucket misconfigurations. Useful for #AWS #pentesting purpleleaf.io/s3-scanner/

Interested in API penetration testing? Here's a review of some technical concepts before you perform them: virtuesecurity.com/api-penetratio…

New to #pentesting? Here's some must-have fundamentals for testing authenticated web-based applications. virtuesecurity.com/pentesting-aut…