Cyber Security Consulting & Testing | Pen Test Partners
Oct 1, 2024 · Pen Test Partners is a UK-based company that provides security consulting and testing for various industries and organisations. They also do security research, incident response, digital forensics, and maritime cyber security.
How to root an Android device for analysis and vulnerability …
Aug 23, 2024 · TL;DR Rooting is useful for Android assessments The process is relatively simple It will wipe all user data from the device and void any warranty Introduction For mobile testing, be it for apps or hardware, having complete control over the device is essential for analysis and vulnerability assessment. Rooting an Android device allows us to
Bloodhound walkthrough. A Tool for Many Tradecrafts
Jun 7, 2019 · Learn how to set up and use BloodHound, a tool that can help you identify attack paths in Active Directory environments. This blog post covers the installation, setup and ingestors of BloodHound on Linux, MacOS and Windows, as well as the DBCreator tool.
Intercepting MFA. Phishing and Adversary in The Middle attacks
Dec 12, 2023 · 3 of my last 5 business email compromise investigations have involved an Adversary in The Middle (AiTM) attack. Even the more security-aware people with bolstered Microsoft 365 (M365) configurations are coming up blank as to how their comprehensive MFA policies have been bypassed. It’s a technique we have been using in our Red Team …
Breaking Out of Citrix and other Restricted Desktop Environments
Many organisations are turning to virtualisation of apps and desktops. This often involves virtualisation platforms such as Citrix to deliver these services. Get your configuration or lock-down wrong and you’ll find users ‘breaking out’ of the environment you thought you had secured. It might not be long after that when you find that your entire
Android Content Providers 101 - Pen Test Partners
The authority gives us the first part of the URI. For anything else we need to do a bit of reverse engineering. The package apk can be found using the pm command: pm list packages -f com.android.launcher3.Then we can extract the apk using adb pull and load it into Android app decompiler of choice (e.g. jadx).. Looking first at the manifest and we can see there’s two …
About - Pen Test Partners
Pen Test Partners is a company that offers ethical hacking and security testing services. Learn about our experienced and friendly testers, our communication and integrity, and our company …
Vulnerabilities that (mostly) aren’t: LUCKY13 - Pen Test Partners
May 3, 2024 · TL;DR LUCKY13 is more an attack than a vulnerability LUCKY13 was patched over a decade ago ... so it’s really unlikely that your server is vulnerable now It's an implementation issue Disabling CBC ciphers is still a good idea ... but not because of susceptibility to LUCKY13 There is no material risk in this issue
How To Do Firmware Analysis. Tools, Tips, and Tricks
May 3, 2019 · Learn how to convert SREC, HEX, TI-TXT and other firmware formats to binary and extract useful data from them. See examples of tools and techniques for firmware analysis, such as strings, binwalk, IDA and Nand-dump-tool.py.
Advice for manufacturers on the coming PSTI regulation
Feb 23, 2024 · TL;DR PSTI: The UK Product Security and Telecommunications Infrastructure (Product Security) Act Regulations effective from 29 April 2024 Assess how, where, why, and when you may be affected Review supply chain and in-house teams for compliance readiness Specific obligations for manufacturers, importers, and distributors Use the PSTI Act and its …