To my fellow Pentesters…

How far do you clients let you go? Do they give you free range to use your best judgement?

Currently - we have a client who refuses to allow even the most basic of PoC exploits to be executed even though our signed paperwork allows for this. It is as if this is a very expensive vulnerability assessment instead of an actual penetration test.

To be very clear, we are not attempting to execute on a weakness that could have …

cybersecurity