A few weeks ago I had read an article on hakin9 about an open source vulnerability reporting tool called PeTeReport. Lately I’ve had my priorities on other things than looking into PeTeReport. And ...
In my CSSLP training a few months ago, a topic came up about a risk traceability matrix. Something I remembered, is that I was used to use something like this as a test consultant for risk based te...
According (ISC)² the CSSLP is ideal for software development and security professionals responsible for applying best practices to each phase of the SDLC. For years I am working in software develop...
I phish you a Merry Xmas Short and dark days, the end of the year is insight. With December as the last month, we still have some fun holidays ahead of us. Sinterklaas has just left the country a...
IT Security Labs has created a new OSCP like vulnerable Windows machine. I downloaded the machine and imported it into my pentest lab environment. It is practice time! Let’s have some fun while ha...
Years ago I automated some work in MS Excel with VBA. Sometimes I decided to protect the source code with a password. A password that later turns out not to provide sufficient protection for the f...
Through a forum post I found out that a PenTest+ (PT0-002) Beta exam could be done for 50 US Dollars. The moment the Beta exam was opened, I registered immediately. And started the journey for me t...
Ready to rumble…. Another HTB machine is going down today. This time it is Horizontall. The name does not ring a bell, it might be something with lateral movement but I am not sure about this. Get...
Today I was in the mood to hack an easy box on Hack The Box. When I logged on to the website I noticed a machine called ‘CAP’ a Linux machine and it was counting down to his retirement. This was th...
A while back I started getting certifications such as CISSP, CEH, ECSA and CSSLP. Many questions are multiple choice and can often be found in books at the end of a chapter. I like to read a paper...