https://www.secforce.com/https://www.secforce.com/serviceshttps://www.secforce.com/case-studieshttps://www.secforce.com/why-secforcehttps://www.secforce.com/about-ushttps://www.secforce.com/contact-ushttps://www.secforce.com/services/#penetration-testinghttps://www.secforce.com/services/#adversary-simulationhttps://www.secforce.com/case-studies/#Cybereasonhttps://www.secforce.com/case-studies/#Nedbankhttps://www.secforce.com/case-studies/#GIGhttps://www.secforce.com/case-studies/#EBA_Clearinghttps://www.secforce.com/case-studies/#Mortgagezhttps://www.secforce.com/blog/llmgoat-a07-system-prompt-leakage/2026-09-29https://www.secforce.com/blog/llmgoat-a06-excessive-agency/2026-09-22https://www.secforce.com/blog/llmgoat-a05-improper-output-handling/2026-09-14https://www.secforce.com/blog/llmgoat-a04-data-and-model-poisoning/2026-09-08https://www.secforce.com/blog/llmgoat-a03-supply-chain/2026-03-25https://www.secforce.com/blog/llmgoat-a02-sensitive-information-disclosure/2026-02-05https://www.secforce.com/blog/section-jacking-removing-primitives-from-process-injection/2026-01-12https://www.secforce.com/blog/llmgoat-a01-prompt-injection/2025-12-02https://www.secforce.com/blog/cve-2023-26465-breaking-through-xss-filters-in-pega-platform/2024-04-22https://www.secforce.com/blog/size-matters-when-capital-letters-introduce-vulnerabilities/2023-06-06https://www.secforce.com/blog/aws-cognito-pitfalls-default-settings-attackers-love-and-you-should-know-about/2023-01-19https://www.secforce.com/blog/cve-2022-20942-its-not-old-functionality-its-vintage/2022-12-13https://www.secforce.com/blog/new-technique-of-stealing-data-using-css-and-scroll-to-text-fragment-feature/2022-06-12https://www.secforce.com/blog/sharpasm-sharpwhispers/2022-05-24https://www.secforce.com/blog/awsome-cis-checker/2022-03-23https://www.secforce.com/blog/escaping-vmwares-nsx-edge-os-jailed-shell/2022-02-18https://www.secforce.com/blog/nimwhispers-direct-system-calls/2022-01-17https://www.secforce.com/blog/dll-hollowing-a-deep-dive-into-a-stealthier-memory-allocation-variant/2021-11-10https://www.secforce.com/blog/exploiting-grandstream-ht801-ata-cve-2021-37748-cve-2021-37915/2021-10-26https://www.secforce.com/blog/azure-persistence-and-detection/2021-07-12https://www.secforce.com/blog/whisper2shout-unhooking-technique/2021-06-25https://www.secforce.com/blog/bypassing-wafs-web-application-filters/2021-02-03https://www.secforce.com/blog/the-devil-is-in-the-details/2021-01-11https://www.secforce.com/blog/progress-moveit-transfer-20201-stored-xss-cve-2020-28647/2020-12-17https://www.secforce.com/blog/msbuild-logger-code-execution/2020-08-10https://www.secforce.com/blog/server-side-javascript-injection/2020-06-02https://www.secforce.com/blog/ajenti-2-remote-code-execution-cve-2018-1000082/2019-10-29https://www.secforce.com/blog/netscaler-epa-bypass-burp-plugin/2019-10-13https://www.secforce.com/blog/printer-exploitation-to-gain-access-to-windows-domain/2019-05-09https://www.secforce.com/blog/death-by-keystrokes/2019-04-01https://www.secforce.com/blog/your-voice-is-my-password/2019-01-18https://www.secforce.com/blog/burp-extension-hmac-signature-in-custom-http-header/2018-12-19https://www.secforce.com/blog/bsides-belfast/2018-10-02https://www.secforce.com/blog/openssh-66-sftp-misconfiguration-universal-exploit/2018-03-13https://www.secforce.com/blog/fixer-fix-protocol-fuzzing-tool/2017-06-27https://www.secforce.com/blog/cve-2017-0199-exploitation-with-cobalt-strike-tutorial/2017-04-15https://www.secforce.com/blog/pre-auth-mysql-remote-dos-integer-overflow/2017-04-13https://www.secforce.com/blog/firewall-against-firewall-bypassing-an-ips/2017-04-06https://www.secforce.com/blog/sparta-10-beta-released/2015-01-05https://www.secforce.com/blog/tunna-v11a-socks/2014-11-24https://www.secforce.com/blog/reverse-engineer-router-firmware-part-2/2014-07-02https://www.secforce.com/blog/meet-us-in-brussels/2014-04-16https://www.secforce.com/blog/reverse-engineer-router-firmware-part-1/2014-04-03https://www.secforce.com/blog/sparta-a-network-infrastructure-penetration-testing-tool/2014-03-25https://www.secforce.com/blog/how-easy-would-it-be-for-a-cyber-criminal-to-gain-control-of-a-plane-in-mid-air/2014-03-20https://www.secforce.com/blog/secforce-will-be-presenting-at-owasp/2014-03-17https://www.secforce.com/blog/4g-lte-architecture-and-security-concerns/2014-03-06https://www.secforce.com/blog/from-csv-import-to-cmdexe-via-sql-injection/2014-02-18https://www.secforce.com/blog/tunna-framework/2013-08-09https://www.secforce.com/blog/scanning-snmpv3-with-nmap-vs-unicornscan/2013-06-19https://www.secforce.com/blog/http-session-fixation-parameter-pollution/2013-02-25https://www.secforce.com/blog/stacked-based-mssql-blind-injection-bypass-methodology/2013-01-07https://www.secforce.com/blog/is-traditional-penetration-testing-effective-at-identifying-risk/2012-12-14https://www.secforce.com/blog/bring-your-own-device-byod-security-challenges/2012-12-05https://www.secforce.com/blog/inter-protocol-communication-exploitation/2012-11-21https://www.secforce.com/blog/shortcomings-of-following-iis-security-best-practices/2012-11-16https://www.secforce.com/blog/vminjector-dll-injection-tool-to-unlock-guest-vms/2012-11-14https://www.secforce.com/blog/secforce-presented-at-the-igem-conference/2012-11-14https://www.secforce.com/blog/fortios-remote-access-web-portal-xss-vulnerability/2012-11-05https://www.secforce.com/blog/identity-protection-and-the-effect-of-social-media-information-leakage-in-the-social-engineering-attacks/2012-10-29https://www.secforce.com/blog/holistic-penetration-testing-when-1-1-does-not-always-equal-2/2012-10-21https://www.secforce.com/blog/secforce-achieves-iso270012005/2012-10-11https://www.secforce.com/blog/secforce-presents-to-european-banking-industry-in-riederau/2012-10-03https://www.secforce.com/blog/cve-2011-4107-poc-phpmyadmin-local-file-inclusion-via-xee-injection/2012-01-12https://www.secforce.com/blog/cve-2011-3368-poc-apache-proxy-scanner/2011-10-10https://www.secforce.com/blog/proxyfuzz-fuzzer-rpm-binary/2011-09-22https://www.secforce.com/blog/secforce-is-now-crest-certified-for-penetration-testing-services/2011-07-25https://www.secforce.com/blog/penetration-testing-gui-manipulation/2011-07-15https://www.secforce.com/blog/secforce-achieves-quality-management-iso-9001-certification/2011-04-06https://www.secforce.com/blog/benefits-of-penetration-testing/2011-02-22https://www.secforce.com/blog/penetration-testing-sql-injection-and-metasploit/2011-01-27https://www.secforce.com/blog/penetration-testing-exploiting-ms09-004-vulnerability-via-sql-injection-using-metasploit/2011-01-24https://www.secforce.com/blog/metasploit-and-sql-injection/2011-01-17https://www.secforce.com/blog/secforce-have-co-authored-the-book-sql-injection-attacks-and-defense/2009-03-31https://www.secforce.com/blog/penetration-testing-service-or-commodity/2009-02-23https://www.secforce.com/blog/advantages-of-penetration-testing/2009-01-07https://www.secforce.com/blog/practical-attack-against-ssl-certificates-creating-a-rogue-ca-certificate/2008-12-30https://www.secforce.com/blog/ftp-bounce-network-scan/2008-12-24https://www.secforce.com/blog/why-penetration-test-is-firewall-not-enough/2008-12-09https://www.secforce.com/blog/gmail-phishing-attack-saga/2008-12-01https://www.secforce.com/blog/penetration-testing-antivirus-firewalls-and-false-sense-of-security/2008-11-09https://www.secforce.com/blog/black-box-penetration-testing-vs-white-box-penetration-testing/2008-11-03https://www.secforce.com/blog/penetration-testing-and-risk-management/2008-10-30https://www.secforce.com/blog/ms-vulnerabilities-and-worms/2008-10-24https://www.secforce.com/blog/scada-security/2008-10-17https://www.secforce.com/blog/cisco-config-retrieval-tool-and-password-reuse/2008-10-07https://www.secforce.com/blog/wordpress-sql-column-truncation-vulnerability/2008-10-07https://www.secforce.com/blog/penetration-testing-with-ipv6/2008-10-01https://www.secforce.com/blog/llmgoat-a08-vector-and-embedding-weaknesses/2007-10-29https://www.secforce.com/blog/llmgoat-a09-misinformation/2007-10-29https://www.secforce.com/blog/llmgoat-a10-unbounded-consumption/2007-10-29