Razvan Ionescu

Pentest-Tools.com, Head of Professional Services

Razvan is a certified security engineer and a penetration tester with a keen interest in cybersecurity and enthusiastic about helping customers detect vulnerabilities in their networks. He is also a firm believer in lifelong learning, and he attends international infosec conferences and training.

Razvan is a certified security engineer and a penetration tester with a keen interest in cybersecurity and enthusiastic about helping customers detect vulnerabilities in their networks. He is also a firm believer in lifelong learning, and he attends international infosec conferences and training.

Posts by this author

Thinking outside the box: 3 creative ways to exploit business logic vulnerabilities in pentests
These flaws are particularly dangerous because attackers exploit behavioral patterns by interacting with apps in different ways than intended. When exploited successfully, they cause serious disruption, including business processes impact and reputational damage.
Author(s)
Razvan Ionescu
Published at
02 Mar 2023
Updated at
12 Jul 2023
How to simulate phishing attacks with the HTTP Request Logger
As a penetration tester or a Red Team security consultant, you probably deal with lots of challenges when you want to simulate phishing attacks using social engineering techniques. Because our team’s goal is to make your job easier by providing the right tools, we’ve put together a hands-on guide you can use straight away!
Author(s)
Razvan Ionescu
Published at
20 Feb 2020
Updated at
09 Jun 2023
How to Exploit the BlueKeep Vulnerability with Metasploit
In this article, we show our approach for exploiting the RDP BlueKeep vulnerability using the recently proposed Metasploit module.
SB CS
Author(s)
Razvan Ionescu,
Stefan Bratescu,
Cristin Sirbu
Published at
10 Sep 2019
Updated at
11 Jul 2023
Analysis of a WordPress Remote Code Execution Attack
This article shows our analysis of a known attack (presented in February 2019) against WordPress versions 5.0.0 and lower, awarding an intruder with arbitrary code execution on the webserver. The article covers each exploitation step and HTTP request required for a successful attack.
Author(s)
Razvan Ionescu
Published at
21 May 2019
Updated at
19 Jun 2023