PentestMag Library
Practical security research, tutorials and analysis from PentestMag.
105 articles found · Showing 1–24
Disclaimer: This is for educational purposes only. Among the key techniques used by cybersecurity professionals to understand and evaluate potential threats is Open-Source Intelligence (OSINT) reconnaissance. OSINT relies on publicly available data to gather insights and understand the digital footprint of an organization or individual. Within OSINT, passive
Pentest TEAM
Disclaimer: This is for educational purposes only. In today’s interconnected world, cyber threats continue to grow in sophistication, frequency, and potential impact. Organizations across all sectors face an uphill battle against cybercriminals who are increasingly leveraging advanced tactics to breach defenses. Within this landscape, Cyber Threat Intelligen
Pentest TEAM
Disclaimer: This is for educational purposes only. Subdomain enumeration is a foundational aspect of reconnaissance in cybersecurity, essential for penetration testers, red teamers, and security researchers who need a comprehensive understanding of their target's infrastructure. By identifying subdomains, security professionals can uncover additional service
Pentest TEAM
Disclaimer: This is for educational purposes only. Open-source intelligence, commonly known as OSINT, plays a vital role in modern cybersecurity and information gathering. As businesses and individuals increasingly use cloud storage services, conducting OSINT on cloud resources has become invaluable for understanding potential vulnerabilities, misconfigurati
Pentest TEAM
Disclaimer: This is for educational purposes only. In an era where social media has become as central to our lives as email and smartphones, it's no surprise that this space also holds immense potential for cybersecurity intelligence. Social Media Intelligence, or SOCMINT, plays a unique and crucial role in contemporary cybersecurity, going beyond traditiona
Pentest TEAM
Disclaimer: This is for educational purposes only. In the expansive and interconnected landscape of modern cybersecurity, satellites represent a unique and critical frontier. These systems serve as essential infrastructure for global communications, navigation, and national security, yet their protection demands a nuanced approach due to vulnerabilities that
Pentest TEAM
Disclaimer: This is for educational purposes only. When it comes to penetration testing, information is power. The right OSINT (Open Source Intelligence) tool can make all the difference between a superficial scan and a deeply insightful engagement. While most pentesters are familiar with popular tools like Shodan, Maltego, and theHarvester, there are lesser
Pentest TEAM
Disclaimer: This is for educational purposes only. Cars today are more than just machines—they’re sophisticated, internet-enabled devices, loaded with software, apps, and communication systems that make them both highly functional and, unfortunately, vulnerable to cyber threats. With these advancements, automakers are turning to Open Source Intelligence, or
Pentest TEAM
Disclaimer: This is for educational purposes only. In an increasingly connected world, vehicles have become as vulnerable to cyberattacks as our personal computers and smartphones. One key component that has drawn attention from hackers is the Controller Area Network, or CAN bus, which facilitates communication between various electronic control units (ECUs)
Pentest TEAM
Disclaimer: This is for educational purposes only. Android Auto and Apple CarPlay are two leading platforms providing seamless smartphone integration with car infotainment systems, offering drivers easy access to navigation, media, and communication tools while keeping their hands on the wheel. However, the convenience of these systems also comes with increa
Pentest TEAM
Disclaimer: This is for educational purposes only. In the evolving world of automotive technology, where autonomous vehicles and smart mobility are becoming more prevalent, GNSS (Global Navigation Satellite Systems) spoofing attacks represent one of the most sophisticated threats. GNSS, which encompasses systems like GPS, Galileo, and GLONASS, provides cruci
Pentest TEAM
Disclaimer: This is for educational purposes only. The modern automotive industry is rapidly evolving as vehicles become more connected, automated, and software-driven. While these advancements bring enormous benefits in terms of convenience, safety, and functionality, they also introduce new challenges—particularly in the realm of cybersecurity. To address
Pentest TEAM
Drones have rapidly transitioned from novelty items to indispensable tools in various industries, including cybersecurity. With their ability to provide aerial surveillance, monitor networks, and gather data, they promise enhanced security measures. However, as organizations rush to adopt this technology, it’s essential to understand that drones are not with
maja.sokolowska
Disclaimer: This is for educational purposes only. The rapid evolution of automotive technology brings both incredible innovations and unique security challenges. Modern cars are now equipped with advanced features like over-the-air (OTA) updates, autonomous driving capabilities, and vehicle-to-everything (V2X) communications. While these advancements offer
Bartek Adach
Disclaimer: This is for educational purposes only. Recent automotive cyberattacks have revealed critical vulnerabilities in the APIs (Application Programming Interfaces) of vehicles from major manufacturers such as BMW, Mercedes-Benz, Ferrari, and Porsche. These weaknesses allowed malicious actors to remotely control vehicle functions, such as unlocking door
Bartek Adach
Drones are no longer just high-tech toys buzzing in the sky; they’ve transformed into powerful tools in the cybersecurity realm. As ethical hackers and security professionals embrace these flying machines, they're revolutionizing how penetration testing is conducted. In this article, we’ll explore the intersection of drones and cybersecurity, highlighting ke
maja.sokolowska
Disclaimer: This is for educational purposes only. Generating comprehensive reports is a critical part of any penetration test. After conducting security assessments, including bypass tests, API security evaluations, LLM jailbreak attempts, and malware generation, creating a detailed report is essential for documenting findings, vulnerabilities, and recommen
zofia bichniewicz
In recent years, drones have transformed from niche gadgets to widely used tools for entertainment, photography, delivery, and even industrial inspections. However, with these advancements come new risks—one of the most concerning being the potential for drones to exploit vulnerabilities in Bluetooth technology. While many are aware of Wi-Fi vulnerabilities,
maja.sokolowska
Drones have transitioned from simple gadgets to powerful tools across industries like agriculture, delivery, and filmmaking. Now, as technology evolves, they are carving out a significant role in cybersecurity. These flying machines are reshaping the landscape of both offensive and defensive cybersecurity strategies, revolutionizing how businesses and govern
maja.sokolowska
Disclaimer: This is for educational purposes only. As cars get smarter and more connected, keeping them safe from cyber threats has become really important. Modern vehicles are no longer just mechanical machines; they are more like computers on wheels, filled with software and connected devices. From self-driving cars to systems that let your vehicle talk to
Bartek Adach
Disclaimer: This is for educational purposes only. With modern vehicles increasingly relying on wireless communication systems for keyless entry, remote start, and RFID-based immobilizers, the risk of Radio Frequency (RF) exploitation has grown significantly. While these technologies offer convenience, they also create vulnerabilities that can be exploited b
Bartek Adach
Disclaimer: This is for educational purposes only. With the rise of connected cars and increasingly complex onboard systems, car hacking is becoming a serious concern. Modern vehicles are no longer just mechanical machines—they’re packed with electronics, software, and sensors, all connected by different networks. And like any software-heavy system, they hav
Bartek Adach
Disclaimer: This is for educational purposes only. In today’s world, cars are no longer just mechanical machines. They’ve become complex, software-driven devices, connected to the cloud, the internet, and even other vehicles. This transformation has brought incredible advancements in convenience, safety, and performance, but it’s also opened the door to a wh
Bartek Adach
The Flipper Zero, a multi-tool designed for hackers and security researchers, has proven to be a capable device for wireless signal manipulation, including interactions with drones. This compact device comes equipped with a range of functionalities, from reading RFID and NFC tags to operating in Sub-GHz frequencies, making it an ideal tool for exploring secu
maja.sokolowska
