Posts about Black box
Field notes on pentesting, Active Directory and cloud security.
- Pentest
Black-box pentesting: what it finds and what it misses
Black-box pentesting: the tester starts from your domain name, with no account and no code. How it runs, what it finds, its blind spots and when it is enough.
- Pentest
Penetration testing (pentest): approaches and methodology
Penetration testing explained: black, grey or white box, the PTES phases, the OWASP Top 10 lists for web, API, AI and CI/CD, and how CVSS scores each flaw.