PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Top Penetration Testing Solutions for IT Security: 2024 Guide

theori.io | research | #ai-security | #burp-suite | #nmap | #tools | #pentest | #owasp-zap | #nessus
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A 2024 roundup of penetration testing tools — Nmap, Gobuster, OWASP ZAP, Nessus, Acunetix and Burp Suite — split between expert and business use, with Xint as an all-in-one AI-native option.
Published
Collected

Related coverage

blog · netlas.io
Nmap Cheat Sheet: Top 10 Scan Techiques
A practical Nmap cheat sheet covering the ten most useful scan techniques — ping, SYN, UDP, version and OS detection and more — with tips on scope, timing and output options.
blog · netlas.io
7 Tools for Web Penetration Testing
Guide to web app pentesting: the standard testing steps, then seven tools—Netlas, Nmap, Arachni, W3af, Nessus, Burp Suite and SQLmap—with descriptions, pros/cons and usage examples.
blog · netspi.com
12 Top Pentesting Tools for Offensive Security Pros
NetSPI surveyed its 300-plus pentesters to rank twelve must-have offensive security tools, including Burp Suite, NMAP, CrackMapExec, Metasploit, BloodHound and Impacket, with commentary on each.
blog · netspi.com
5 Apache Log4j Discovery Tips
Five tips for finding vulnerable Apache Log4j instances: Nmap/Nessus scanning, searching hosts for Log4j files, vendor outreach, developer collaboration, and risk-prioritized web application testing.
research · portswigger.net
Practical Web Cache Poisoning
James Kettle's whitepaper shows how to turn web caches into exploit delivery systems, hijacking JavaScript and poisoning responses across popular sites, plus defenses and open source tooling.
research · portswigger.net
Bypassing CSP using polyglot JPEGs
Gareth Heyes shows how to build a polyglot JavaScript/JPEG that remains a valid image yet executes as script, bypassing CSP on sites that host user-uploaded images on the same domain.
Back