Interview: Bugcrowd Founders on Herding Ninjas for Crowdsourced Bug Bounties
29 March 2013
By Jason Haddix Love it or hate it, crowdsourcing is here to stay. While it’s been mostly confined to development and design, eventually it was going to come to security. Two such gentlemen trying to pioneer the space are Casey Ellis and Sergei Belokamen. Being long-time hackers and having seen how the security space works, they decided to start Bugcrowd. […]
Archived: Haddix
Book Review: BackTrack 4: Assuring Security by Penetration Testing
25 June 2011
Don’t have the cash for a $2000 – 3000 penetration testing course? Don’t know which tools are outdated or relevant? Lost in the sea of Backtrack options? You learn better on your own anyway? No problem! BackTrack 4: Assuring Security by Penetration Testing (BASPT), authored by Shakeel Ali and Tedi Heriyanto, is a 12-chapter compendium on everyone’s favorite hacking distribution, […]
Archived: Book Reviews | Haddix
Review: Advanced Penetration Testing (APT)
20 September 2010
This year I had the opportunity to take a few stellar instructor-led training courses, one of which was Joe McCray’s “Advanced Penetration Testing: Pentesting High Security Environments” course from his training entity LearnSecurityOnline. Since I’m already doing pen testing full time I feel like it’s a tremendous opportunity to see what techniques other testers use. I’m definitely not arrogant enough […]
Archived: Haddix
Review: eLearnSecurity’s Penetration Testing Pro (PTP)
29 April 2010
eLearnSecurity’s Penetration Testing Pro (PTP) – What CEH Should Have Been Recently the web has been abuzz with pentest training options. The CEH received new life as it was added to DoD Directive 8570 as well as revamped its courseware in version 6.0, Offensive Security rolled out their version 3.0 of “Pentesting With BackTrack,” and it seems like new training options are […]
Archived: Haddix