Daniel Sandau | White Oak Security

How To Become A Penetration Tester

This year, I gave a talk at GenCyber at the Alexandria Technical College in northern Minnesota. As an all-week camp hosted for middle and high schoolers, it was a great […]

How To Prepare for an API Pentest – Curl

This is one part of a series of posts on how to prepare your API for a pentest. The first post was focused on Insomnia. The second was focused on […]

How to Prepare for an API Pentest – Postman

This is one part of a series of posts on how to prepare your API for a pentest. Other posts are located here: Insomnia. Similar to web applications, web APIs […]

How To Prepare for an API Pentest – Insomnia

This is one part of a series of posts on how to prepare your API for a pentest. Check back in the near future for additional content. Similar to web […]

Accessibility Within Application Security Tools

Before we get into the nuts and bolts of this post, I need to provide a little background. The COVID-19 pandemic has brought a number of changes to our day […]

Apple iOS 13 Device Setup for Penetration Testing

[HERE’S A COMPANION POST ON SETTING UP AN ANDROID DEVICE FOR PENETRATION TESTING] One of the initial challenges of performing an iOS mobile application penetration test is getting a suitable […]

Android 10 Device Setup for Penetration Testing

[COMPANION POST FOR APPLE DEVICES] One of the initial challenges of performing an Android mobile application penetration test is getting a suitable test environment setup. One of the easiest ways […]

Service Fingerprinting Through External Interaction-Part 2

External Service Interaction through DNS or HTTP is one way to identify out-of-band server interaction vulnerabilities (issues where the server will respond to something other than your testing computer). This […]

Service Fingerprinting Through External Interaction – Part 1