Razvan Ionescu

Pentest-Tools.com, Head of Professional Services

Razvan is a certified security engineer and a penetration tester with a keen interest in cybersecurity and enthusiastic about helping customers detect vulnerabilities in their networks. He is also a firm believer in lifelong learning, and he attends international infosec conferences and training.

Razvan is a certified security engineer and a penetration tester with a keen interest in cybersecurity and enthusiastic about helping customers detect vulnerabilities in their networks. He is also a firm believer in lifelong learning, and he attends international infosec conferences and training.

Posts by this author

Thinking outside the box: 3 creative ways to exploit business logic vulnerabilities in pentests

These flaws are particularly dangerous because attackers exploit behavioral patterns by interacting with apps in different ways than intended. When exploited successfully, they cause serious disruption, including business processes impact and reputational damage.

Razvan Ionescu

Published at

02 Mar 2023

Updated at

13 Apr 2023

12 min read
How to simulate phishing attacks with the HTTP Request Logger

As a penetration tester or a Red Team security consultant, you probably deal with lots of challenges when you want to simulate phishing attacks using social engineering techniques. Because our team’s goal is to make your job easier by providing the right tools, we’ve put together a hands-on guide you can use straight away!

Razvan Ionescu

Published at

20 Feb 2020

Updated at

11 May 2023

6 min read
How to Exploit the BlueKeep Vulnerability with Metasploit

In this article, we show our approach for exploiting the RDP BlueKeep vulnerability using the recently proposed Metasploit module.

Razvan Ionescu

Published at

10 Sep 2019

Updated at

21 Feb 2023

7 min read
Analysis of a WordPress Remote Code Execution Attack

This article shows our analysis of a known attack (presented in February 2019) against WordPress versions 5.0.0 and lower, awarding an intruder with arbitrary code execution on the webserver. The article covers each exploitation step and HTTP request required for a successful attack.

Razvan Ionescu

Published at

21 May 2019

Updated at

07 Jul 2022

9 min read