PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

What is Offensive Security?

bugcrowd.com | blog | #bug-bounty | #vulnerability-management | #red-team | #offensive-security | #penetration-testing | #security-strategy
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Offensive security tests an organization's defenses through simulated attacks—such as penetration testing and bug bounties—to find and fix weaknesses before malicious actors can exploit them.
Published
Collected

Related coverage

blog · hackenproof.com
What Is Penetration Testing? How It Works, What You Get, and When to Test
A pentest is a time-boxed, authorized attack where ethical hackers chain flaws to prove exploitable risk, not just run scans. It outlines deliverables, audit drivers, and when to test.
blog · netspi.com
The Systems That Time Forgot
Forgotten test and legacy systems that escape asset management become easy entry points for attackers. The author outlines practical steps for discovery, inventory, and ownership.
tool · projectdiscovery.io
Enhanced Team Management, 2FA, and Asset Filtering - PDCP (v0.8.7)
We are pleased to unveil our latest release of ProjectDiscovey Cloud Platform, v0.8.7, packed with features that streamline team management, enhance security, and improve asset operations—particularly for enterprise security engineers. Read on to learn what's new. Multi-Team Creation & Member Segregation We've introduced the ability to create multiple teams, providing greater flexibility and control over project management. Create multiple teams Segment users and teams, centralize b
tool · projectdiscovery.io
March 2024 Newsletter
The latest release of Nuclei, v3.2, introduces significant updates aimed at enhancing the security scanning capabilities of the Nuclei engine.
tool · projectdiscovery.io
Introducing Chaos Bug bounty recon data API
We’re proud to announce release of our Chaos Bug bounty recon data API today. This API will allow hackers to get instant data on targets of their choice without running any additional tools at just single hit of request. Goals behind the project Reconnaissance is complex, it requires a proper setup and not everyone is equally good at it. People are skilled differently, some are amazing at looking at Web Attack Surfaces, some prefer to dive deep into logic bugs. Being good at recon requires some
blog · bugcrowd.com
Savant Forge: Automated offensive testing to keep pace with AI-generated code
Bugcrowd's Savant Forge combines fuzz testing with symbolic execution to surface real exploitable vulnerabilities in CI/CD pipelines, while Savant Runtime tracks live third-party components in production to support SBOM compliance.
Back