PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Introducing Javelin

blog.trailofbits.com | vulnerability | #threat-detection | #attack-simulation | #announcement | #security-assessment | #javelin | #spearphishing
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Trail of Bits introduces Javelin, an automated tool simulating real-world attacks on enterprises: identifying spearphishing targets, exposing infrastructure weaknesses, and benchmarking defenses.
Published
Collected

Related coverage

blog · blog.trailofbits.com
Can you pass the Rekt test?
Trail of Bits CEO Dan Guido and a Web3 security working group created the Rekt Test, simple yes-or-no questions modeled on the Joel Test that help blockchain teams assess their security posture.
blog · blog.trailofbits.com
Security assessment techniques for Go projects
Trail of Bits adapts its security assessment techniques for Go projects, leveraging compiler-generated coverage maps and type-width safety alongside static analysis, fuzzing, and property testing.
blog · blog.trailofbits.com
Dear DARPA: Challenge Accepted.
Trail of Bits holds one of seven funded-track proposals for DARPA's Cyber Grand Challenge — a first-of-its-kind automated security tournament with finals at DEF CON 2016, tied to its Javelin work.
blog · bishopfox.com
Adversarial Controls Testing: A Step to Cybersecurity Resilience
Bishop Fox introduces Adversarial Controls Testing: instead of reviewing configs, ACT simulates MITRE ATT&CK-mapped TTPs to measure whether email, endpoint and network controls detect and respond.
blog · bishopfox.com
If Your Scope Is Bad, Your Pen Test Will Be Bad
Why pen test quality hinges on scoping: assessment teams have limited time and legal limits attackers don't, so sharing goals and context up front maximizes the value you get.
blog · bishopfox.com
Preparing for the Google Partner Program Security Test
A self-assessment questionnaire for the Google Partner Program security test: incident response, MFA, token storage, encryption, and the five flaws most common in last year's assessments.
Back