2020 Archives | Contextual Security

BloodHound Basics

by Andrew Nash | Aug 3, 2022 | cybersecurity, penetration testing, Uncategorized

“Hacking” isn't magic, but sometimes it is presented that way. Much of penetration testing and “hacking” is learning the tools of the trade and how they work "under the hood." In this series we hope to provide a high-level overview of common offensive tools, how they...

Exploiting the JMX Console (A slightly different path to compromise)

by Terence Martin | Jul 19, 2022 | cybersecurity, penetration testing

On a recent engagement, the client I was assessing had a relatively strong security posture. None of the old standby attacks were working. The client had disabled LLMNR and WPAD based on a previous security assessment, and all the client’s Windows machines were...

PCI DSS 4.0 Timeline

by Joshua Jones | Jul 8, 2022 | Compliance, PCI DSS 4.0

March 2022 forever changed the compliance landscape for all time. PCI DSS 4.0 was launched, the world was ushered into an era of bliss. Ok, seriously, bliss and compliance frameworks are, for most, not even in the same solar system. But, PCI DSS 4.0 is here and, for...

Catchphrase: Data Breach Edition

Recent Posts

Recent Comments

Archives

Categories

Meta

BloodHound Basics

Exploiting the JMX Console (A slightly different path to compromise)

PCI DSS 4.0 Timeline

Solid security begins with knowing. Excels by doing.