Here’s where our security researchers analyze and share insights about the latest vulnerabilities, providing details on how they work, or how to exploit them.
Back in August 2019, I reported a security vulnerability in Magento affecting versions 2.3.2, 2.3.3,…
Sometimes headline-making vulnerabilities aren’t necessarily the ones causing the most burning challenges for companies. What…
The security team at Pentest-Tools.com has recently performed an in-depth analysis of the SACK Panic…
In this article, we show our approach for exploiting the RDP BlueKeep vulnerability using the…
In this article we show a new method of exploiting the critical SQL Injection vulnerability…
This article shows our analysis of a known attack (presented in February 2019) against WordPress…
Let’s understand how OGNL Injection works in Apache Struts. We’ll exemplify with two critical vulnerabilities…
This article is a deep dive into how Nmap works, to understand its internal structure,…
In this article, we discuss the most important HTTP headers that you should configure on…
Let’s explore a couple of practical attack scenarios that can be implemented as PoCs to…