Ethical hacking & pentesting blog

Come for the PoCs and security research focused on new CVEs and stay for the ethical exploitation guides and how-tos our offensive security specialists create.

Announcing our new subscription-based pricing options

Our main goal is (and will remain) to offer our customers a reliable and intuitive online platform they can use to perform security assessments and automated penetration tests.

Author(s)

Ioana Rijnetu

Published at: 25 Sep 2019

[New feature] Internal network scanning with Pentest-Tools.com

To quickly discover potential vulnerabilities or evaluate your security posture, regular internal network scans are essential. To make this easier for you, we’ve added a new feature on Pentest-Tools.com!

Author(s)

Ioana Rijnetu

Published at: 24 Sep 2019

How to exploit the BlueKeep vulnerability with Metasploit

In this article, we show our approach for exploiting the RDP BlueKeep vulnerability using the recently proposed Metasploit module.

Author(s)

Published at: 10 Sep 2019

Pentest-Tools.com to participate at Black Hat Europe 2019

Pentest-Tools.com will be exhibiting at Black Hat Europe 2019. Join us in December for one of the biggest cybersecurity events and come to meet the Pentest-Tools.com team.

Author(s)

Ioana Rijnetu

Published at: 28 Aug 2019

Customized white label, website scanner improvements & other platform updates

Here are 7 platform improvements we deployed in the current update to make Pentest-Tools.com a valuable asset for your pentesting toolbox.

Author(s)

Ioana Rijnetu

Published at: 20 Aug 2019

Delete scans through the API, edit scheduled scans, and more improvements

Here are 5 platform improvements we’ve worked on in the current update to make Pentest-Tools.com a must-have asset for your pentesting toolkit.

Author(s)

Ioana Rijnetu

Published at: 30 Jul 2019

[New scanners] Find Associated Domains, Password Auditor, and 2 more new tools

Vulnerability scanners are essential tools for penetration testers who need to assess the security of their servers, sites, or networks. That’s why we focus on adding new scanners on Pentest-Tools.com to help our customers discover critical security flaws quickly and effectively.

Author(s)

Ioana Rijnetu

Published at: 25 Jul 2019

BlueKeep, the Microsoft RDP vulnerability - What we know so far

BlueKeep is a critical security flaw found in Microsoft Remote Desktop Services that was making the headlines for the past two months. In this article, we explore the key facts about this vulnerability.

Author(s)

Ioana Rijnetu

Published at: 23 Jul 2019

Exploiting SQL Injection in Magento Using Sqlmap

In this article we show a new method of exploiting the critical SQL Injection vulnerability in Magento (CVE-2019-7139), using the well known SQLMap tool.

Author(s)

Alexandru Postolache

Published at: 14 Jun 2019

How to do a Basic Website Vulnerability Assessment with Pentest-Tools.com

Let’s see how to perform a basic security evaluation of your web application with the tools from Pentest-Tools.com.

Author(s)

Adrian Furtuna

Published at: 24 May 2019

Announcing our managed pentesting services for web applications

Checking for vulnerabilities and how attackers could exploit them provide valuable insights on how you can improve your company’s security posture.

Author(s)

Ioana Rijnetu

Published at: 23 May 2019

Analysis of a WordPress Remote Code Execution attack

This article shows our analysis of a known attack (presented in February 2019) against WordPress versions 5.0.0 and lower, awarding an intruder with arbitrary code execution on the webserver. The article covers each exploitation step and HTTP request required for a successful attack.

Author(s)

Razvan Ionescu

Published at: 21 May 2019

Get vulnerability research & write-ups

In your inbox. (No fluff. Actionable stuff only.)