The ROI of Modern Pentesting 2021:
Does your pentesting program bring enough value?

t.iss.one/Library_Sec

#Research
"Debloating Address Sanitizer", USENIX 2022.

t.iss.one/Library_Sec

📚 t.iss.one/Library_Sec

📚 t.iss.one/Library_Sec

#HTB_WriteUp
Fulcrum
t.iss.one/Library_Sec

#Infosec_Standards
NIST SP 800-40 Rev.4:
"Guide to Enterprise Patch Management Planning: Preventive Maintenance for Technology", November 2021.

t.iss.one/Library_Sec

"Triple Threat: North Korea-Aligned TA406 Steals, Scams and Spies", Nov. 2021.

t.iss.one/Library_Sec

#Metasploit

From Exploit to Metasploit - The basics

t.iss.one/Library_Sec

#AD
Active Directory Security

t.iss.one/Library_Sec

#Infosec_Standards
NIST SP 1800-31 (Draft):
"Improving Enterprise Patching for General IT Systems: Utilizing Existing Tools and Performing Processes in Better Ways", November 2021.

t.iss.one/Library_Sec

#HTB_WriteUp

HTB Writeups - ForwardSlash

t.iss.one/Library_Sec

📚 t.iss.one/Library_Sec

#Analytics
"The VOID Community Report, 2021.

// Verica Open Incident Database (VOID)

#Cloud_Security
"The Continuous Audit Metrics Catalog.
Version 1.0", 2021.

📚 t.iss.one/Library_Sec

#Research
"BLACKSMITH: Scalable Rowhammering in the Frequency Domain", 2022.

]-> Blacksmith Revives Rowhamer:
https://comsec.ethz.ch/research/dram/blacksmith

#Research
"Fuzzware: Using Precise MMIO Modeling
for Effective Firmware Fuzzing", 2021.

📚 t.iss.one/Library_Sec

#Metasploit
EN metasploit guide

t.iss.one/Library_Sec

📚 t.iss.one/Library_Sec

#Mobile
Sincon 2021:
"Mobile App Hardening
Against Reverse Engineering".