Have you ever wondered why it is essential to conduct penetration testing regularly in today’s evolving digital landscape? With cyber threats becoming more sophisticated, businesses and cybersecurity professionals must stay one step ahead to protect sensitive data and maintain trust. In this blog, we’ll look at penetration testing. We will highlight its importance, benefits, and …
About Opaque Opaque is a JavaScript package to allow secure password-based, client-server authentication without the server ever obtaining knowledge of the password. Audit Description Through OTF’s Red Team Lab, 7ASecurity conducted a penetration test and whitebox security review of Opaque. A whitebox review is a form of application testing that provides the tester with complete knowledge of the application …
About Disguiser Disguiser is a novel framework that enables end-to-end measurement for accurately and comprehensively investigating global internet censorship practices. It’s challenging to conduct large-scale internet censorship measurement, as it involves triggering censors through artificial requests and identifying abnormalities from corresponding responses. Due to the lack of “ground truth” on the expected responses from legitimate services, …
In the pursuit of cost-effective cybersecurity solutions, automated “pentests” may seem enticing. However, the real test cost extends beyond affordability. Challenges of Automation: Automated tools miss critical issues, leading to false negatives (missed vulnerabilities) and wasted effort on false positives (fake findings your team must review). The True Test Cost: Skilled testers provide accurate insights, …
Time is ticking! With the Free Pentest Contest 2023, you now have just one month left to submit your entry before the ~January 31st, 2024. Don’t miss out on this golden chance to bolster your cybersecurity defenses – act now! This is your chance to win a complimentary, professional pentest and fortify your defenses against …
7ASecurity had the privilege to collaborate with the Open Source Technology Improvement Fund (OSTIF), as well as the Node Version Manager (nvm) team, in a recent security audit of the nvm project. What is Node Version Manager? nvm is an open-source version manager for Node.js. It is designed to be secure, reliable and easy to use.nvm operates as …
We are thrilled to announce the return of the Free Pentest Contest for 2023: This is your chance to win a complimentary, professional pentest and fortify your defenses against cyber threats 100% for free, no strings attached. In short: The winner gets a 100% free pentest, with no less than the usual quality of our …
7ASecurity worked with Bridgefy to complete a whitebox pentest of the mobile app, SDK, cloud infrastructure, and privacy to help improve Bridgefy’s overall security posture. What is Bridgefy? Bridgefy, a popular mobile messaging app, allows you to send offline messages by leveraging Bluetooth technology. This app aims to provide secure messaging when infrastructure is not …
This blog post summarizes a whitebox security review conducted by 7ASecurity against the ArgoVPN platform. What is ArgoVPN? ArgoVPN is a free VPN with an unlimited bandwidth that is developed for Android devices. It allows users to visit blocked websites, online services, social media and messaging apps. The developers designed ArgoVPN to meet the needs …
7ASecurity had the privilege to collaborate with the Open Source Technology Improvement Fund (OSTIF), as well as the K-9 Mail and Thunderbird teams at Mozilla, in a recent security audit of the Mozilla K-9 Mail application. What is K-9 Mail? K-9 Mail is an open source email application that runs on most Android devices. Ideally, the application is reliable, intuitive and secure …
