Search • Page 8/13

Search the Pentest-Tools.com Blog

How to detect the Zoho ManageEngine ADSelfService Plus RCE (CVE-2021-40539)

Overwhelmed by so many high-risk vulnerabilities that emerge? Thousands of them are disclosed every year and 2021 is no exception. Systems are complex, cyber attacks get more sophisticated, and patching is still a challenge for many organizations. As infosec pros, it’s our responsibility to help companies (and individuals) understand the real implications and impact of a critical vulnerability and help them find it before it gets worse.

Author(s)

Catalin Filip

Published at: 13 Dec 2021

Security research

Detect and exploit Gitlab CE/EE RCE with Pentest-Tools.com (CVE-2021-22205)

“Just patch it!” is the usual advice when a vulnerability hits (and it’s not a zero-day). But it’s never that simple in organizations that have to manage layers upon layers of infrastructure. When you have to deal with a critical CVE like the latest unauthenticated RCE in Gitlab (CVSSv3 10.0), the tangled, messy process of patching bubbles to the surface.

Author(s)

Daniel Bechenea

Published at: 05 Nov 2021

Milestones

We’re leveling up! Check out the new website and brand update!

As an ethical hacker, you know there’s always more to a piece of technology than meets the eye.

Author(s)

Andra Zaharia

Published at: 03 Nov 2021

Platform updates

Detect & exploit the latest CVEs + more automation updates

“Great and getting even better” is what we commit to with each monthly update we roll out on Pentest-Tools.com.

Author(s)

Ioana Rijnetu

Published at: 05 Oct 2021

Hacking tutorials

How to detect CVE-2021-22986 RCE with Pentest-Tools.com

As a pentester, when you see a major critical vulnerability persist for months in unpatched systems (like Log4Shell), you have a responsibility to help others understand its severity and how they can fix it. This is exactly why this article exists.

Author(s)

Cristian Cornea

Published at: 21 Sep 2021

Platform updates

Detect critical CVEs, scan stats + more updates

If you’ve had an intense summer, that makes two of us. We worked hard to roll out new and helpful updates, so let’s break them down:

Author(s)

Ioana Rijnetu

Published at: 14 Sep 2021

Read the article titled Behind the Tools: Răzvan Ionescu on the growth mindset, insatiable curiosity, and being comfortable with change in ethical hacking

Milestones

Behind the Tools: Răzvan Ionescu on the growth mindset, insatiable curiosity, and being comfortable with change in ethical hacking

At Pentest-Tools.com, we use our managed pentesting services to learn from our customers and listen to them. Every one of us works hard to understand what users need and why, feeding that knowledge into the platform while we continue to learn and grow as individuals and as a team. That’s why we eat our own dog food and we always practice what we preach.

Author(s)

Ioana Rijnetu

Published at: 03 Sep 2021

Platform updates

Detect ProxyShell (pre-auth Microsoft Exchange RCE) with Pentest-Tools.com

On-prem Microsoft Exchange servers have created a lot of work for IT and security specialists in the past months. In March, ProxyLogon left servers vulnerable to Server-Side Request Forgery through CVE-2021-26855, so we launched a dedicated scanner for it. In May, #proxynotfound popped up, so we integrated detection for it into our Network Vulnerability Scanner to make detection and reporting faster.

Author(s)

Andra Zaharia

Published at: 11 Aug 2021

Security research

6 techniques for account enumeration in a penetration test [demo included]

Enumeration is one of the essential tactics that help you gain a foothold in your target’s ecosystem. As a penetration tester, you can gain a lot of speed and prep your exploitation phase more thoroughly if you get enumeration right.

Author(s)

Cristian Cornea

Published at: 20 Jul 2021

Platform updates

OWASP & CWE vuln classifcation added, wordlist limit increased, and more updates

This month we rolled out 5 platform improvements that streamline your pentests so you can do more of the work you most enjoy:

Author(s)

Ioana Rijnetu

Published at: 11 Jun 2021

Platform updates

Detect Microsoft Exchange RCE #proxynotfound with our Network Vulnerability Scanner

Running on-prem Microsoft Exchange servers? If you didn’t catch the NSA boilerplate announcement, there’s another batch of vulnerabilities to scan for – and we built what you need.

Author(s)

Andra Zaharia

Published at: 13 May 2021

Platform updates

New modules, methods & payload - April updates

It’s been a busy month for us and we’re excited to share what we worked on!

Author(s)

Ioana Rijnetu

Published at: 23 Apr 2021

Discover our ethical hacking toolkit and all the free tools you can use!

Create free account