Blog

Home > Resources > Blog

Latest

Basic Authentication Versus CSRF

September 21, 2023

By Joe Sullivan in Application Security Assessment, Security Testing & Analysis

Featured

Okta for Red Teamers

September 18, 2023

By Adam Chester in Red Team Adversarial Attack Simulation

The Curious Case of the Password Database

October 20, 2022

By Travis Kaun in Active Directory Security Review, Application Security Assessment, Password Audits, Penetration Testing, Security Testing & Analysis

Nowadays, password managers are king. We use password managers to secure our most sensitive credentials to a myriad of services and sites; a compromise of the password manager could prove devastating. Due to recently disclosed critical Common Vulnerabilities and Exposures (CVEs) involving ManageEngine’s Password Manager Pro software, a client came to us at TrustedSec, wondering:...

Read

Pwnton Pack: An Unlicensed 802.11 Particle Accelerator

May 24, 2022

By Travis Kaun in Hardware Security Assessment, IoT Security Assessment, Penetration Testing, Security Testing & Analysis

This past Christmas, I received a terrific gift from my in-laws: a replica Ghostbusters Proton Pack. I was thrilled. You see, growing up in the mid 80s, Ghostbusters was my jam. Fast forward 37 years and with the recent Ghostbusters: Afterlife film release, my nostalgia was hitting a fever pitch. Shortly after our Christmas dinner,...

Read