Cyber Security Blog

Blog posts about Cyber Security, Pentesting, Cloud Security and Red Teaming from our team.

Penetration Test

DOM Invader - The New Feature of Burp Suite

Burp Suite quickly and easily detects the XSS issue in DOM-based Cross Site Scripting executed directly in the browser.
Jan Kahmen
Jan Kahmen
8 min read
Mobile App Penetration Test

FORCEDENTRY: iMessage Zero-Click Exploit in Check

An analysis of a Saudi Arabian activist's smartphone revealed that NSO Group used a zero-click exploit against iMessage.
Jan Kahmen
Jan Kahmen
8 min read
Web/API Penetration Test

What Is NIST's Cybersecurity Framework?

A powerful tool, the Cybersecurity Framework helps NIST organize and improve your cybersecurity at the same time.
Jan Kahmen
Jan Kahmen
7 min read
Adversary Simulations

Security Awareness with a Phishing Simulation

A phishing simulation is an often used tool to simulate or fake cyber attacks.
Jan Kahmen
Jan Kahmen
8 min read
Penetration Test

The OWASP Mobile Security Testing Guide

Since the OWASP Testing Guide deals with mobile security, the question - What is mobile security anyway? arises.
Jan Kahmen
Jan Kahmen
8 min read
Web/API Penetration Test

Pinning of Certificates and Public Keys

Public key pinning allows you to specify your public key set for a future SSL/TLS connection to your host.
Jan Kahmen
Jan Kahmen
8 min read