# 4ARMED

> No nonsense international application security company providing CREST certified penetration testing, consultancy, training + more.

## Content

### Blog Posts
- [OWASP Top Ten for Developers Workshop now online](https://www.4armed.com/blog/owasp-top-ten-training-online/): Published 2024-09-02
- [Exploit Code for Ingress Nginx CVE-2023-5044](https://www.4armed.com/blog/cve-2023-5044-exploit/): Published 2024-01-18
- [Are you ready for an application penetration test?](https://www.4armed.com/blog/are-you-ready-for-a-pentest/): Published 2023-03-03
- [Seccomp in Kubernetes](https://www.4armed.com/blog/kubernetes-seccomp/): Published 2022-10-27
- [Kubeletmein EKS (and other) Updates](https://www.4armed.com/blog/kubeletmein_updates/): Published 2021-03-05
- [SRI Check Tool](https://www.4armed.com/blog/sri-check/): Published 2021-02-06
- [Cyber Essentials Changes](https://www.4armed.com/blog/cyber-essentials-update/): Published 2020-03-31
- [Coronavirus Update](https://www.4armed.com/blog/covid19-update/): Published 2020-03-16
- [Securing Managed Kubernetes Workshop at ContainerDays 2019](https://www.4armed.com/blog/containerdays-securing-gke-workshop/): Published 2019-05-30
- [Hacking DigitalOcean's New Kubernetes Service](https://www.4armed.com/blog/hacking-digitalocean-kubernetes/): Published 2018-12-13
- [Kubeletmein - A tool for abusing kubelet credentials](https://www.4armed.com/blog/kubeletmein-kubelet-hacking-tool/): Published 2018-12-06
- [Hacking Kubelet on Google Kubernetes Engine](https://www.4armed.com/blog/hacking-kubelet-on-gke/): Published 2018-11-29
- [XXE Vulnerability in Excel Streaming Reader Java Library](https://www.4armed.com/blog/excel-streaming-reader-vulnerability/): Published 2018-11-12
- [Exploiting XXE with Excel](https://www.4armed.com/blog/exploiting-xxe-with-excel/): Published 2018-11-12
- [Open Redirect Vulnerability  in KeystoneJS](https://www.4armed.com/blog/open-redirect-in-keystonejs/): Published 2018-09-12
- [Scoping a penetration test](https://www.4armed.com/blog/scoping-a-penetration-test/): Published 2018-05-24
- [4ARMED sponsors DevOpsDays London 2017](https://www.4armed.com/blog/devopsdays-london-2017-sponsors/): Published 2017-09-04
- [Ransomware Tips for Application Developers](https://www.4armed.com/blog/ransomware-for-git-repos/): Published 2017-06-02
- [Build a Private Burp Collaborator Server on AWS with Terraform and Ansible](https://www.4armed.com/blog/burp-collaborator-terraform-ansible/): Published 2017-04-12
- [Upcoming Speaking Events](https://www.4armed.com/blog/upcoming-speaking-events/): Published 2017-03-15
- [A proper Content Security Policy Generator](https://www.4armed.com/blog/how-to-create-content-security-policy/): Published 2016-12-08
- [List of Hosting Provider Penetration Testing Authorisation Forms](https://www.4armed.com/blog/list-of-hosting-provider-penetration-testing-authorisation-forms/): Published 2016-11-16
- [Marc speaking at OWASP Cambridge](https://www.4armed.com/blog/marc-speaking-owasp-cambridge/): Published 2016-11-10
- [4ARMED exhibiting at London Law Expo](https://www.4armed.com/blog/london-law-expo-2016/): Published 2016-09-30
- [4ARMED speaking at Malvern Festival of Innovation](https://www.4armed.com/blog/malvern-festival-innovation-2016/): Published 2016-09-28
- [App Sec Hacker Training Course gains CREST Accreditation](https://www.4armed.com/blog/ash-training-course-gains-crest-accreditation/): Published 2016-09-27
- [How to Perform a Mask Attack Using hashcat](https://www.4armed.com/blog/perform-mask-attack-hashcat/): Published 2016-09-26
- [Nessus Credentialed Compliance Scanning and Patch Audits How To](https://www.4armed.com/blog/how-to-run-nessus-compliance-scan/): Published 2016-09-22
- [How To Perform a Combinator Attack Using Hashcat](https://www.4armed.com/blog/hashcat-combinator-attack/): Published 2016-09-19
- [How To Perform A Rule-Based Attack Using Hashcat](https://www.4armed.com/blog/hashcat-rule-based-attack/): Published 2016-09-12
- [4ARMED at CBI Cyber Security Conference 2016](https://www.4armed.com/blog/4armed-at-cbi-cyber-security-conference-2016/): Published 2016-09-09
- [4ARMED Sponsors ISC2 Tech Parents Workshop](https://www.4armed.com/blog/isc2-tech-parents-workshop/): Published 2016-09-08
- [The Commoditisation of Penetration Testing](https://www.4armed.com/blog/penetration-testing-commoditisation/): Published 2016-09-05
- [Doing your own SSL/TLS testing](https://www.4armed.com/blog/doing-your-own-ssl-tls-testing/): Published 2016-09-05
- [Don't get caught - Spot the phish!](https://www.4armed.com/blog/spot-the-phish/): Published 2016-09-02
- [Security Assessment Guide](https://www.4armed.com/blog/security-assessment-guide/): Published 2016-08-09
- [Configuring Google Chrome to Proxy Through Burp Suite](https://www.4armed.com/blog/google-chrome-proxy-through-burp-suite/): Published 2016-08-05
- [su: You're doing it wrong](https://www.4armed.com/blog/su-youre-doing-it-wrong/): Published 2016-08-01
- [How to Crack MD5 Hashes Using hashcat](https://www.4armed.com/blog/hashcat-crack-md5-hashes/): Published 2016-07-28
- [Forging WiFi Beacon Frames Using Scapy](https://www.4armed.com/blog/forging-wifi-beacon-frames-using-scapy/): Published 2016-07-26
- [Baseball ex-scouting director "hacks" rival team](https://www.4armed.com/blog/baseball-ex-scouting-director-hacks-rival-team/): Published 2016-07-20
- [Installing the ELK Stack on Ubuntu - Elasticsearch, Logstash, Kibana and Nginx](https://www.4armed.com/blog/installing-the-elk-stack-on-ubuntu/): Published 2016-06-07
- [LLMNR and NBT-NS Poisoning Using Responder](https://www.4armed.com/blog/llmnr-nbtns-poisoning-using-responder/): Published 2016-06-06
- [4ARMED sponsoring Security B-Sides London 2016](https://www.4armed.com/blog/bsides-london-2016/): Published 2016-04-06
- [Should you Penetration Test Third Party SaaS Applications?](https://www.4armed.com/blog/penetration-testing-saas-applications/): Published 2016-03-14
- [Security Consultant Vacancy](https://www.4armed.com/blog/security-consultant-vacancy/): Published 2016-02-10
- [Install and configure Exim 4 SMTP Relay via Smarthost on Ubuntu](https://www.4armed.com/blog/install-and-configure-exim-4-smtp-relay-via-smarthost-on-ubuntu/): Published 2015-11-24
- [The Endgame - Attributing Hacking Team implants globally](https://www.4armed.com/blog/endgame-attributing-hacking-team-implants-globally/): Published 2015-08-26
- [Network Defense - Catching the Galileo RCS using Snort](https://www.4armed.com/blog/network-defense-catching-galileo-rcs-using-snort/): Published 2015-08-12
- [The Phantom Menace - Weaponising a consumer drone](https://www.4armed.com/blog/phantom-menace-weaponising-drones/): Published 2015-08-10
- [Memory Forensics - Detecting Galileo RCS on Windows](https://www.4armed.com/blog/memory-forensics-detecting-galileo-rcs-windows/): Published 2015-08-06
- [Hacking Team Galileo RCS - Video Demonstration](https://www.4armed.com/blog/galileo-rcs-video-demonstration/): Published 2015-07-29
- [Hacking Team's KillSwitch - Disabling the Galileo RCS remotely and silently](https://www.4armed.com/blog/hacking-teams-killswitch-disabling-galileo-rcs-remotely-silently/): Published 2015-07-22
- [Galileo RCS - Running an espionage operation](https://www.4armed.com/blog/galileo-rcs-running-espionage-operation/): Published 2015-07-20
- [Hacking Team's Galileo RCS - Repurposing espionage software](https://www.4armed.com/blog/hacking-teams-galileo-rcs-repurposing-espionage-software/): Published 2015-07-15
- [Hacking Team RCS Analysis - (or is that 'Hacked Team'?)](https://www.4armed.com/blog/hacking-team-rcs-analysis-hacked-team/): Published 2015-07-09
- [Spiceworks - check your privilege!](https://www.4armed.com/blog/spiceworks-check-your-privilege/): Published 2015-06-24
- [Infosec and Security BSides London 2015](https://www.4armed.com/blog/infosec-and-security-bsides-london-2015/): Published 2015-05-29
- [Does PCI DSS v3.1 blur the security and compliance lines?](https://www.4armed.com/blog/does-pci-dss-v3-1-blur-the-security-and-compliance-lines/): Published 2015-04-16
- [Is using hacked Uber accounts über stupid?](https://www.4armed.com/blog/is-using-hacked-uber-accounts-uber-stupid/): Published 2015-03-31
- [CRESTcon 2015 - Dealing with Targeted Attacks](https://www.4armed.com/blog/crestcon-2015-dealing-targeted-attacks/): Published 2015-03-20
- [Penetration Testing: Living the dream?](https://www.4armed.com/blog/penetration-testing-living-the-dream/): Published 2015-03-12
- [Cambridge Security Cluster - February 2015 Meeting](https://www.4armed.com/blog/cambridge-security-cluster-february-2015-meeting/): Published 2015-01-20
- [Security Tester Vacancy](https://www.4armed.com/blog/security-tester-vacancy/): Published 2015-01-13
- [How to set a custom Metasploit banner](https://www.4armed.com/blog/set-custom-metasploit-banner/): Published 2014-11-27
- [Looks like I picked the wrong week to quit sniffing HTTP](https://www.4armed.com/blog/wrong-week-to-quit-sniffing-http/): Published 2014-10-17
- [Shellshocked? My Heartbleeds for you](https://www.4armed.com/blog/shellshocked-my-heartbleeds-for-you/): Published 2014-10-03
- [What is a Penetration Test? Do I need one?](https://www.4armed.com/blog/what-is-a-penetration-test/): Published 2014-09-17
- [Windows 7 WiFi Command Cheatsheet](https://www.4armed.com/blog/windows-7-wifi-command-cheatsheet/): Published 2014-08-07
- [How Do I Hack? is a dumb question](https://www.4armed.com/blog/hackers/): Published 2014-07-16
- [We came, we saw, we cybered](https://www.4armed.com/blog/we-came-we-saw-we-cybered/): Published 2014-07-04
- [The EASY Way](https://www.4armed.com/blog/the-easy-way/): Published 2014-06-30
- [Dock Cybercrime Workshops](https://www.4armed.com/blog/dock-cybercrime-workshops/): Published 2014-06-30
- [What is Full Stack Security?](https://www.4armed.com/blog/full-stack-security/): Published 2014-06-16
- [Heartbleed Demonstration Video](https://www.4armed.com/blog/heartbleed-demonstration-video/): Published 2014-04-10
- [Nmap NSE Howto: MySQL Auth Bypass](https://www.4armed.com/blog/nmap-nse-howto-mysql-auth-bypass/): Published 2012-06-12
- [WEP Cracking Cheatsheet](https://www.4armed.com/blog/wep-cracking-cheatsheet/): Published 2011-11-05
- [How Card Payments work and PCI DSS](https://www.4armed.com/blog/how-card-payments-work-pci-dss/): Published 2011-09-17


### Case Studies
- [App, Mobile and Infrastructure Penetration Test](https://www.4armed.com/case-studies/app-api-mobile-infrastructure-penetration-test/): Published 0001-01-01
- [App, Mobile and Infrastructure Penetration Test](https://www.4armed.com/case-studies/multi-platform-penetration-test-agriculture/): Published 0001-01-01
- [Application and GKE Kubernetes Penetration Test](https://www.4armed.com/case-studies/kubernetes-penetration-test-payments/): Published 0001-01-01
- [Kubernetes Penetration Test](https://www.4armed.com/case-studies/kubernetes-penetration-test-fintech/): Published 0001-01-01
- [Kubernetes Penetration Test](https://www.4armed.com/case-studies/kubernetes-penetration-test-insurance/): Published 0001-01-01
- [PCI DSS Secure Development Training](https://www.4armed.com/case-studies/pci-dss-secure-development-training/): Published 0001-01-01
- [Ruby on Rails Application Penetration Test](https://www.4armed.com/case-studies/rails-application-penetration-test/): Published 0001-01-01


### Services
- [Application Penetration Testing](https://www.4armed.com/assess/penetration-testing/): Published 0001-01-01
- [Application Penetration Testing Training](https://www.4armed.com/educate/application-penetration-testing-training/): Published 0001-01-01
- [Bespoke Application Security Training](https://www.4armed.com/educate/bespoke-security-training/): Published 0001-01-01
- [DevSecOps Transformation](https://www.4armed.com/transform/devops/): Published 0001-01-01
- [Kubernetes Penetration Testing](https://www.4armed.com/assess/kubernetes-penetration-testing/): Published 0001-01-01
- [Kubernetes Security Consultancy](https://www.4armed.com/advise/kubernetes-security-consultancy/): Published 0001-01-01
- [Managed Security Testing](https://www.4armed.com/assess/managed-security-testing/): Published 0001-01-01
- [Mobile Application Security Review](https://www.4armed.com/assess/mobile-application-security-review/): Published 0001-01-01
- [OWASP Top Ten for Large Language Model Applications Secure Development Training](https://www.4armed.com/educate/owasp-top-ten-llm-for-developers/): Published 0001-01-01
- [OWASP Top Ten Secure Development Training](https://www.4armed.com/educate/owasp-top-ten-for-developers/): Published 0001-01-01
- [PCI DSS Consultancy](https://www.4armed.com/advise/pci-dss-consultancy/): Published 0001-01-01
- [PCI DSS Secure Coding Workshop](https://www.4armed.com/educate/pci-dss-secure-coding-workshop/): Published 0001-01-01
- [SaaS Penetration Testing](https://www.4armed.com/assess/saas-penetration-testing/): Published 0001-01-01
- [Secure Cloud Migration](https://www.4armed.com/transform/secure-cloud-migration/): Published 0001-01-01
- [Software Security Consultancy](https://www.4armed.com/advise/software-security-consultancy/): Published 0001-01-01
- [Virtual CSO](https://www.4armed.com/advise/virtual-cso/): Published 0001-01-01
- [Vulnerability Scanning](https://www.4armed.com/assess/vulnerability-scanning/): Published 0001-01-01


### Solutions
- [Chief Information Security Officer](https://www.4armed.com/solutions/ciso/): Published 0001-01-01
- [Information Security Manager](https://www.4armed.com/solutions/information-security-manager/): Published 0001-01-01
- [PCI DSS Compliance](https://www.4armed.com/solutions/pci-dss/): Published 0001-01-01
- [Software Developer](https://www.4armed.com/solutions/software-developer/): Published 0001-01-01


### Pages
- [4ARMED Reference Request](https://www.4armed.com/feedback/reference/): Published 0001-01-01
- [About Us](https://www.4armed.com/about/): Published 0001-01-01
- [Application Security Testing Training Feedback](https://www.4armed.com/feedback/training/appsectesting/): Published 0001-01-01
- [Careers](https://www.4armed.com/careers/): Published 0001-01-01
- [Contact Us](https://www.4armed.com/contact/): Published 0001-01-01
- [Meet with Marc at 4ARMED](https://www.4armed.com/meet/mw/): Published 0001-01-01
- [Our Security](https://www.4armed.com/security/): Published 0001-01-01
- [OWASP Top Ten 2021 Feedback Form](https://www.4armed.com/feedback/training/owasptopten/): Published 0001-01-01
- [Penetration Testing Feedback](https://www.4armed.com/feedback/penetration-testing/): Published 0001-01-01
- [Privacy Policy](https://www.4armed.com/privacy/): Published 0001-01-01
- [Security Testing Scoping Form](https://www.4armed.com/resources/security-testing-scoping-form-react/): Published 0001-01-01
- [Security Testing Scoping Form](https://www.4armed.com/resources/security-testing-scoping-form/): Published 0001-01-01