Posts about Grey box
Field notes on pentesting, Active Directory and cloud security.
- Pentest
Grey-box pentesting: which access to provide, and why
Grey-box pentesting: test accounts, API documentation, a domain user account. Which access to give the pentester, what it lets them test, and where it stops.
- Pentest
Penetration testing (pentest): approaches and methodology
Penetration testing explained: black, grey or white box, the PTES phases, the OWASP Top 10 lists for web, API, AI and CI/CD, and how CVSS scores each flaw.