Plan cybersecurity projects, save time on assessments and fixes, automate reporting. For cybersecurity vendors and internal cyber teams. Built by pentesters.
Joined May 2023
- Tweets94
- Following32
- Followers22
- Likes4
Scoping is the part of a pentest that happens before any testing, and it's easy to get wrong over email.
Over the years at @secureblockio, we've learned a few things about it. Here's what we ask before testing starts, and why.
pentestpad.com/blog/how-to-s…
1
21
50% (minimum) less time spent on pentest reporting
…with PentestPad.
Skip the copy-paste.
Track findings, collaborate in real-time, and export clean, fully customisable reports (with interactive graphs supported) - in seconds.
#pentest #pentesting #infosec #cybesecurity
4
113
Working with external pentesters?
Or letting clients into the PT process?
✅ Give access to clients, auditors, or external teams for specific projects
✅ Give access only to what they need
Try PentestPad: pentestpad.com/contact
#cybersecurity #pentesting #infosec
3
35
🔻 5 practical things to prepare for Digital Operational Resilience Act (DORA / CRA) in EU (based on the current regulatory text + ENISA + EBA updates):
DORA's goal is described as cybersecurity + operational resilience.
#DORA #CyberResilience #EURegulation #CRA #cyber
1
25
🟡 Port 3000 - Common risks, CVEs and what to look for...
Port 3000 is a go-to for local testing frameworks like Node.js, React, and Rails: pentestpad.com/port-exploit/…
#pentest #pentesting #cybersecurity #portmapping
2
52
🌐 We’ve built (and continue to expand) a comprehensive, up-to-date glossary of every port you’re likely to encounter during cybersecurity testing.
•General information
•Associated CVEs
•Possible misconfiguration
pentestpad.com/port-exploit
#pentesting #cybersecurity
1
18
We’ve put together a pentest report template, and we’re open-sourcing it.
We hope it helps freelancers, internal teams, and anyone working to improve their reporting.
🔗 Grab the editable template here: pentestpad.com/penetration-t…
#cybersecurity #pentesting #infosec #opensource
4
69
📈 Track pentest vulnerabilities as a live feed
🔺 Auto-generate custom, branded reports
📄 Collaborate in real-time with security teams & clients
Built by pentesters. Saves time for the fun stuff.
#cybersecurity #pentest #pentesting #infosec
2
81
How often should you really be running a pentest? 🗓️
If your goal is to keep your systems safe, or you’re aiming for PCI DSS, ISO 27001, or DORA regulation - check out our cheat sheet below.
📋 pentestpad.com/blog/how-ofte…
#cybersecurity #compliance #infosec #dora #pcidss #cra
1
21
Cyber in different spreadsheets and email threads?
📋 Track all internal & external cyber projects
🏦 Ideal for regulated sectors (banks, fintech, gov)
📁 Organized & audit-ready by default
👥 Invite your external providers
#cybersecurity #pentesting #compliance #auditready
1
24
Did you know that Windows machines can open up port 7680 to share updates peer-to-peer with other systems on your LAN or even across the internet?
🧰 We added 7680 to our Port Cheat-sheet
pentestpad.com/port-exploit/…
#pentesting #cybersecurity #infosec #redteam #cheatsheet #port
2
85
Cloud compromise in 5 moves - SIMPLIFIED:
🥺 Low-privileged IAM user
👨👩👧👦 Enumeration
🤥 Privilege escalation
🕺 Exfiltration
🥷 Persistence
#cloudsecurity #infosec #aws #azure #iam #cybersecurity #learncybersecurity
1
109
🔺 A good pentest report is more than findings, it should be clear and audit-ready.
🔸 Professional
🔸 Executive-ready
🔸 Compliance-aligned
🔸 Technically solid
Full blog post: pentestpad.com/blog/what-to-…
#pentest #cybersecurity #infosec #vulnerabilitymanagement #secureblock
2
55
🔻🔓If you only had 1 HOUR for a Pentest, where would you start?🔓
* or add your own
#pentesting #pentest #CyberSecurity #infosec #security #recon
0%Recon, endpoint discovery
100%Login, authentication
0%Authorization (access)
0%Admin portal enumeration
1 votes • Final results 1
43
From email to domain-wide damage in 5 steps.
🎣 → 🔐 → 🚶♂️ → 💥
Ransomware doesn’t begin with encryption.
It often starts with a phishing email.
#cybersecurity #ransomware #phishing #infosec #incidentresponse #cybersecurityawareness
1
39
Trusted sessions = trusted actions.. right?
Here’s a step-by-step look at trusted session misuse (Cross Site Request Forgery).
🔐 Defenses: SameSite cookie settings, CSRF tokens, and re-authentication for sensitive actions.
#cybersecurity #websecurity #infosec #sessionsecurity
30
New blog drop: How XSS can turn into full HTTP hijacking 🔶
From JavaScript injection to session takeover — we break it down step by step.
pentestpad.com/blog/http-hij…
#XSS #cybersecurity #infosec #bugbounty #hacking #websecurity #Pentesting
2
37
A sneak peek into the upcoming PentestPad release – packed with new features you’ve been asking for! 🎯
Release Highlights:
🔸 Improve automated report generation
🔸 Easily track and balance tasks across your team
#Cybersecurity #Pentesting #AI #Innovation #ProductUpdate
2
37
At PentestPad, choosing @tiptap_editor @svenadlung as the right text editor was an important decision to support penetration testers.
Special thanks to Petar Cvetko Voćanec for creating our own Figures extension shared below. 🧡
npmjs.com/package/@pentestpa…
2
32
Blind SQL Injection Explained.
Unlike classic SQLi, blind injection doesn’t show obvious errors. Attackers infer data bit by bit using timing or logical conditions.
Here’s a simplified flow showing how a blind SQL is exploited.
#learncyber #CyberSecurity #infosec #explained
1
30