ServicesContactWiki

Services

Shaping security beyond conventions with offense.

33

Red Teaming

Explore top-tier cybersecurity with our Red Teaming service. We simulate real threats, uncovering weaknesses before real risks arise. Elevate your defense game with HEGO – where protection meets innovation.

17

Penetration Testing

Delve into your web applications and APIs with HEGO. We uncover vulnerabilities that could compromise your digital assets, offering actionable insights to boost your app's security.

12

LLM Security

Pentesting AI and LLMs can identify vulnerabilities and reduce AI cybersecurity risk, removing opportunities for abuse.

7

AI Security

Pentesting AI and LLMs can identify vulnerabilities and reduce AI cybersecurity risk, removing opportunities for abuse.

6

ROE Template

Rules of Engagement (ROE) Template

2

Five Phases of the Penetration Testing Process

In this article, we’ll discuss the responsibilities of a penetration tester and outline the five penetration testing phases, in addition to looking at some popular penetration testing tools that can be used to examine systems for vulnerabilities.

3

Definitions

This lexicon is a starting point to help define terms commonly used in red teaming. Clearly defined terms are critical for communications and essential for security professionals.

3

Red Team Engagement Goal Planning

Creating and deciding Red Team engagement goals can be difficult. This is especially true for organizations new to Red Teaming. Whether you are on the delivery or receiving end of a Red Team engagement, the solid goals must be decided to have successful Red Team engagement. This document provides a list of common goals that work well in most Red Team engagements.

6

Red Team Report Template

This is a sample red team report. Use this as a starting point or reference to create or enhance your own custom template.

8

Red team checklist

This set of checklists is intended to be a start to help plan and build a red team. Each design may have additional requirements. Use this as a starting point and modify as you see fit.

3

Red Teaming and MITRE ATT&CK

MITRE’s Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK™) is a curated knowledge base and model for cyber adversary behavior, reflecting the various phases of an adversary’s lifecycle and the platforms they are known to target. ATT&CK is useful for understanding security risk against known adversary behavior, for planning security improvements, and verifying defenses work as expected.

3

Red Team Tradecraft and TTP Guidance

This document should be used to guide Red Team actions of all Red Team operators on all engagements. Exceptions to these rules can (and will) be made based on specific Rules of Engagement (ROE) or decision made by Red Team leads during an engagement.

SOON 8

Ethical Hacking

A library to record and analyse web page traffic and user behaviour

SOON 2

Offensive Security

Offensive security is the practice of actively seeking out vulnerabilities in an organization's cybersecurity. It often involves using similar tactics as attackers and might include red teaming, penetration testing and vulnerability assessments. Offensive security can be shortened to "OffSec."

3

Red Team Engagement vs Penetration Test vs Vulnerability Assessment

A threat-based approach to security testing may use several names; Red Teaming, Threat Operations, Threat Assessment, Purple Teaming, Adversarial Assessment, Penetration Testing, Vulnerability Testing. These are not all the same, and it is important that the security industry defines terms to establish a common understanding. To help with this, all threat-based security testing in this post will be referred to as Red Teaming.

7

Rules of Engagement (ROE) Planning

The Rules of Engagement establish the responsibility, relationship, and guidelines between the Red Team, the network owner, the system owner, and any stakeholders required for engagement execution.

17

OWASP Testing Guide Checklist

This guide provides a detailed discussion on the security assessment of web applications as well as their deployment stack, including web server configuration.

8

Pointer (Endpoint Discovery Tool)

Pointer is a Fast Simple Lightweight Tool for Endpoint Discovery.

3

OWASP Top 10 for Large Language Model Applications

The OWASP Top 10 for Large Language Model Applications Service aims to educate developers, designers, architects, managers, and organizations about the potential security risks when deploying and managing Large Language Models (LLMs).

2

Decomposing a Threat

As a class, we will examine the Energetic Bear threat actor to build a threat profile that can be used during a Red Team engagement.