Pentera Blog: Pentesting, Red Teaming & Security

The Shift from Port 445 to Port 135 in Cybersecurity

Yuval Lazar

13 Sep 2023

PsExec shows how legitimate administrative tools can become highly effective attack mechanisms when abused by adversaries. The danger is not just the tool itself, but the trusted protocols and ports that allow remote execution and lateral movement to blend into normal operations. Organizations need to monitor these pathways closely and...

Managing Legacy Infrastructure for Security

Pentera Team

03 Sep 2023

Legacy technology becomes risky when business dependence grows faster than security maturity. The most effective way to drive action is to translate technical debt into business impact—operational disruption, compliance risk, financial exposure, and reputational damage. Continuous security validation helps security leaders prove that risk with evidence, not assumptions.

Risks of LOLBAS in Security

Nir Chako

03 Aug 2023

LOLBAS attacks are dangerous because they turn trusted system tools into covert attack mechanisms, making malicious activity look legitimate. That makes detection far harder and gives attackers a stealthy path to download payloads, execute code, and move without raising the right alarms. Organizations need stronger visibility, behavioral detection, and continuous...

Securing Neglected Network Protocols

Pentera Team

13 Jul 2023

Protocols that are often treated as low risk can still provide attackers with valuable reconnaissance and man-in-the-middle opportunities inside the network. The danger is not just in the protocol itself, but in how easily overlooked traffic can be abused for discovery, spoofing, and lateral movement. Organizations need deeper internal visibility...

Penetration Testing Trends: A 2023 Perspective

Pentera Team

07 Jun 2023

Penetration testing is no longer just a compliance checkbox - it is becoming a strategic measure of how well security controls perform under real-world conditions. As attack frequency rises and environments change faster, organizations need more continuous and scalable ways to validate their defenses without disrupting the business. That is...

Finding MSSQL Database Version with TDS Protocol

Amit German

29 May 2023

Exposed database services can reveal more than many teams realize - even before authentication. Something as simple as version disclosure can help attackers identify known weaknesses and prioritize exploitation. Limiting unnecessary exposure and continuously validating database access paths are critical to reducing that risk.

Reducing Exposure on the Manufacturing Attack Surface

Pentera Team

18 May 2023

s manufacturing IT and OT environments become more connected, the attack surface grows and the cost of downtime rises with it. That makes continuous security validation critical - not just to find vulnerabilities, but to understand which exposures could actually disrupt operations. Manufacturers that test often, prioritize by real risk,...

Proactive and Preventative Security Measures

Pentera Team

21 Mar 2023

Organizations are investing heavily in security, yet breaches persist because visibility alone does not prove resilience. The adversarial perspective helps security teams understand what is truly exploitable, how attacks can progress, and where remediation will have the greatest impact. That is what makes continuous security validation such a critical evolution...

Securing MongoDB with Data-at-Rest Encryption

Pentera Team

13 Mar 2023

Data-at-rest encryption is a foundational control for protecting sensitive information when systems are offline or physically compromised. For teams using MongoDB Community Edition, practical approaches like filesystem-level encryption can help close an important security gap without requiring a costly platform overhaul. The goal is simple: even if storage is stolen,...

Best Practices for Migrating from CentOS to Ubuntu

Pentera Team

02 Mar 2023

When an operating system reaches end of life, the risk is not just technical debt - it is growing security exposure and reduced operational stability. A migration from CentOS to Ubuntu is not simply a platform change; it is an opportunity to modernize patching, streamline dependencies, and strengthen long-term supportability....

Effective Strategies for Bypassing Antivirus

Pentera Team

26 Jan 2023

Techniques like reflective loading show how attackers increasingly focus on bypassing detection, not just gaining access. When malicious code can hide inside trusted processes and stay off disk, traditional endpoint controls face a much harder challenge. That is why organizations need layered defenses, stronger behavioral monitoring, and continuous validation to...

Assessing Your Attack Surface from an Attacker’s Perspective

Pentera Team

18 Dec 2022

Managing the external attack surface is no longer just about counting internet-facing assets - it is about understanding which ones are most attractive to attackers. Size increases exposure, but attractiveness determines where adversaries are most likely to focus first. Organizations need continuous visibility and validation to reduce both.