Tagged testing

Run ADF, cointegration, GARCH and bootstrap tests on financial time series

Build Terraform modules, write tests and set up CI with security scanning

Decrypt Windows DPAPI secrets and browser credentials during authorized red team tests

Run device-code and illicit consent phishing tests against Microsoft 365 and Entra ID

Audit Solidity contracts in Foundry with Slither, Mythril and fuzz and invariant tests

Find unprotected pages and admin interfaces by forced browsing during authorized tests

Test REST, GraphQL and gRPC APIs for auth, rate limit and business logic flaws

Run DCSync to pull KRBTGT and admin hashes via replication rights in authorized tests

Move laterally with Pass-the-Ticket by reusing Kerberos tickets from LSASS in tests

Store and use cryptographic keys on HSMs through PKCS#11 with SoftHSM2 for testing

Map hidden AD attack paths and trust relationships with BloodHound during red team tests

Run sqlmap to confirm SQL injection and pull database contents in authorized tests

Audit OpenAPI files and scan APIs with 42Crunch in CI/CD and IDEs

Patch OT and ICS systems safely with vendor testing, staged rollouts and rollback plans

Plan ransomware backups with 3-2-1-1-0 copies, immutable storage and restore tests

Run multi-turn adversarial tests on LLM apps with Microsoft PyRIT orchestrators

Build Postman collections that test OWASP API Top 10 flaws and run in CI

Forge cross-site requests against sessions to test CSRF defenses in authorized tests

Test file path parameters for traversal and LFI with encoding bypasses and ffuf

Capture session tokens and bypass MFA with Evilginx3 in authorized red team tests

Plan authorized physical intrusion tests covering badges, locks and guard procedures

Run Atomic Red Team tests and map detection gaps on an ATT&CK Navigator heatmap

Test SOAP and WSDL services for XXE, XML injection and WS-Security bypasses

Prepare for SOC 2 Type II audits with gap checks, evidence collection and control tests

Run Atomic Red Team tests with atomic-operator to validate SIEM and EDR coverage

Run a web app pentest that follows the OWASP WSTG methodology with Burp Suite

Test cache poisoning through unkeyed headers and parameters in authorized tests

Test exported Android components and intents for injection and data leaks

Test API auth for broken token checks, JWT flaws and credential stuffing exposure

Find BOLA and IDOR flaws by swapping object IDs across REST and GraphQL APIs

Find mass assignment bugs by adding hidden fields like role or isAdmin to requests

Test REST, GraphQL and gRPC APIs against the OWASP API Security Top 10

Find CORS misconfigurations that let other origins read authenticated responses

Test web apps and APIs for broken access control with Burp Suite Authorize

Find price, workflow and voucher logic flaws that scanners miss in Burp Suite

Test contact forms and password resets for CRLF and SMTP header injection

Test Host header handling for password reset poisoning and cache poisoning

Test JWTs for alg none, key confusion and kid injection with jwt_tool

Find open redirects in next and return parameters and chain them into phishing

Find leaked API keys, PII and insecure storage during security assessments

Test LLM apps for system prompt leakage with direct and encoded extraction tricks

Test XML inputs for XXE, XPath injection and entity attacks that leak files

Test for reflected, stored and DOM XSS, then bypass sanitizers and CSP

Find and validate XSS with the Burp Suite scanner, Intruder and Repeater

Exploit XXE to read server files, run SSRF and exfiltrate data in pentests

Assess JWT implementations for weak signing, algorithm confusion and auth bypass

Test mobile app backend auth for token handling, session fixation and IDOR

Test OAuth 2.0 and OIDC flows for redirect URI, PKCE and token leakage flaws

Test RAG pipelines for poisoned documents and indirect prompt injection