Posts about White box
Field notes on pentesting, Active Directory and cloud security.
- Pentest
White-box pentesting: testing with the source code in hand
White-box pentesting: source code, architecture and accounts handed to the tester. What this approach finds that others miss, what it costs, and when to choose it.
- Pentest
Penetration testing (pentest): approaches and methodology
Penetration testing explained: black, grey or white box, the PTES phases, the OWASP Top 10 lists for web, API, AI and CI/CD, and how CVSS scores each flaw.