Yet another security researcher
Joined March 2009
- Tweets365
- Following243
- Followers1.4K
- Likes96
Pinned Tweet
I really don't like how pentesters' team work is organized these days. It's just chat+unstructured project data in txt files.
Zero true teammate collaboration. So, I've spent the last few months solving the problem. Check it out:Hive - self-hosted pentest collaborative platform!
This Post is from an account that no longer exists. Learn more
GitLab and SAST reports. Advantages and disadvantages
linkedin.com/pulse/gitlab-sa…
And you also need a system to aggregate and manage vulnerabilities found by all those security scanners.
Hexway ASOC is great for this 🤘
Overwhelmed by the number of supply chain security vendors? 😅
Here's a detailed breakdown of 20+ vendors across:
* Securing source code access and CI/CD pipelines
* SCA
* Malicious dependencies
* Container security
* SBOMs
* Code provenance
and more!
It was great collaborating with @InvestiAnalyst on this, hope it's useful!
Dmitry Chastuhin retweeted
Played around with ChatGPT for pentest reporting.
Still a long way from making us unemployed anytime soon. But yeah! It can speed up a boring routine😺
How to automate pentest reporting with Chat GPT?
With just a button click, you can now quickly generate descriptions or risks of issues or any other report content, making the process more efficient and less time-consuming.
Keep an eye on updates
hexway.io/hive
The ability to look at the entirety of a situation to see the bigger picture is critical, especially for application security.
What's the point of audits if all the vulnerabilities found remain in 50-page pentester reports or ci/cd Pipeline artifacts?
linkedin.com/posts/dmitry-ch…
Take a peek at how convenient it is now to merge the same issues in Hexway Hive.
We love making the work of pentesters more pleasant with each new release.
hexway.io
What if we say that @_hexway can be MORE adaptive?
Yeah, it's not just you can pick a name or something. Next Hive update will bring you a little bit more flexibility in your pentest workflow.
Soon.
#hexway #PTaaS #penetrationtesting #pentest
Why are all modern checklist apps so awful?
Some thoughts on the topic while we're developing checklists for pentesters
hexway.io/blog/why-do-all-mo…
Using your favorite vulnerability scanners has just got easier!
This Post is from an account that no longer exists. Learn more
So now you can compare output from different scan tools(nmap, nessus, etc) and detect what services/port/IPs appear over time. Super cool!
This Post is from an account that no longer exists. Learn more
People love dashboards, don't they? We've implemented a special view in Hive that displays pentest project summary (scope, services, ports, most vulnerable hosts, etc).
Hey-Hey!
We know you love @Burp_Suite (we too). But it's really hard to collaborate, share results in it and see the full picture when you work as a team.
We're trying to solve that problem! Soon, we're going to release something very interesting!
youtube.com/watch?v=1NIZj0D4…
Hey!
We've developed a tool, that enables pentest service providers to offer Penetration Testing as a Service (PTaaS) out of the box!
Meet - Hexway Apiary!
Now you can deliver your pentests faster and turn One-Time Customers into Lifetime Customers
hexway.io/apiary/
The short story about how we used Clubhouse as a social engineering tool to find out more about our client's employees during RedTeam testing
hexway.io/research/short-sto…
Hey!
Need a tool to collaborate and analyze the scope(nmap, nessus,etc),reportgen during a pentest or bb,but it's too tedious to install something(oh you)?
I have a solution for you:demohive.hexway.io/
Free,easy-to-use,and with cat pictures inside. Well,what else do you need?
RCE PoC for CVE-2020-6207 (Missing Authentication Check in SAP Solution Manager)
github.com/chipik/SAP_EEM_CV…