Penetration Testing Blog

Windows Persistence tool

RedPersist: A Windows Persistence tool written in C#

RedPersist RedPersist is a Windows Persistence tool written in C# Usage You can use it with execute-assembly or standalone executable RedPersist.exe –method C:\Path\to\executable.exe RedPersist.exe –help Available Methods –help/-h : Help Menu RedPersist.exe –help –eventviewer : Persistence...

CVE-2023-0625

CVE-2023-0625 & CVE-2023-0626: Critical Docker Desktop RCE Bugs

In the era of containerization, Docker Desktop stands tall as a beacon of simplicity for developers. With its one-click-install mechanism and straightforward GUI, developers around the world have embraced Docker Desktop for crafting, running,...

HTTP headers security

EasyScan: Light-weight web security scanner

EasyScan EasyScan is a Python script that analyzes the security of a given website by inspecting its HTTP headers and DNS records. The script generates a security report with recommendations for addressing potential vulnerabilities....

CVE-2023-41991

CISA warns of Apple’s three zero-days exploited in spyware attacks

The US Cybersecurity & Infrastructure Security Agency (CISA) has ordered federal agencies to address three recently patched zero-day flaws affecting iPhones, Macs, and iPads known to be exploited in attacks. CVE-2023-41991 Apple Multiple Products Improper...

EventList

Event Management Tips and Tricks

Putting together a social gathering is no mean feat, especially when you consider the wide range of skills required to pull off a successful event. Be it a corporate event, charity gala, product launch,...

django-DefectDojo

django-DefectDojo v2.26.4 releases: application vulnerability correlation & security orchestration application

DefectDojo is an open-source application vulnerability correlation and security orchestration application. It allows you to manage your application security program, maintain product and application information, schedule scans, triage vulnerabilities, and push findings into defect...