PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Navigating Threats: Adopting Proactive Social Engineering and Network Testing Strategies

bishopfox.com | blog | #network-security | #red-team | #social-engineering | #penetration-testing | #internal-testing
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A fireside chat recap where Bishop Fox experts discuss social engineering tactics—like impersonating new employees to trick help desks—and the value of internal network testing.
Published
Collected

Related coverage

blog · netspi.com
Internal vs. External Penetration Testing: What You Need to Know
External penetration testing examines internet-facing services, while internal testing simulates insider threats or post-breach attackers. This article compares the two approaches and their use cases.
blog · netspi.com
The value of multi-layer / comprehensive pen testing
A NetSPI consultant argues application security focus has overshadowed broader risks: in 90-95% of their pen tests, weak network and system configurations still enable full environment compromise.
blog · netspi.com
The Systems That Time Forgot
Forgotten test and legacy systems that escape asset management become easy entry points for attackers. The author outlines practical steps for discovery, inventory, and ownership.
blog · bishopfox.com
Unified Code, Unified Risks: Uncovering Vulnerabilities in .NET MAUI Applications
Bishop Fox shows how to bypass .NET MAUI's platform packaging to extract readable C# assemblies from Android and iOS apps, then use that shared-assembly insight to uncover critical vulnerability patterns in common business logic.
blog · blog.quarkslab.com
Overview of Passive Optical Networks (PONs) Security
Passive Optical Networks (PONs) connect end-users to infrastructure using optical fibre in the last kilometre (Fibre-to-the-x). This article provides a technical overview of the security features in ITU-T specifications: Gigabit-capable PON (GPON), 10-Gigabit-capable PON (XG-PON), 10-Gigabit-capable Symmetric PON (XGS-PON), Next-generation PON 2 (NG-PON2), and 50-Gigabit-capable PON (50G-PON). The analysis covers authentication schemes, key derivation, encryption methods, and associated security implications.
blog · projectblack.io
Bypassing EDR with Local AI
A pentest shows Claude refuses to build an LSASS dumper, but local DeepSeek and uncensored Qwen models produce a working XOR-encrypted minidumper, making AI-assisted EDR evasion nearly effortless.
Back