OWASP Top 10 2021
OWASP Top 10: The Bedrock of an Application Penetration Test

When performing web app, mobile app, and API penetration tests, we refer to the OWASP[…]

SQL Injection
SQLi Series: An Introduction to SQL Injection

In this first in a new series, Raxis’ Andrew Trexler explains what SQL Injection (SQLi)[…]

Simultaneous Sessions
Why We Take Simultaneous Sessions Seriously

Raxis Lead Penetration Tester Matt Dunn explains why you simultaneous sessions is a significant finding[…]

Web App Testing: Part Two
What is Web App Pentesting? (Part Two)

Lead penetration tester Matt Dunn continues his discussion about web application testing. In Part[…]

Web App Testing: Part One
What is Web Application Penetration Testing?

Learn how Raxis approaches web application testing and how it differs from network penetration testing.[…]

Computer, tablet and smart phone
What You Need to Know (But Were Afraid to Ask) about Raxis Web App Testing

When testing web applications, the diverse skills Raxis brings to the table ensure that you[…]

Brad Herring, Raxis VP of Business Development
External vs. Web App Pen Testing

What’s the difference between an external pen test and a web application pen test? Raxis[…]

Raxis API Tool
Raxis API Tool

Raxis Lead Developer, Adam Fernandez, has developed a tool to use for testing JSON-based REST[…]

Web Attacks: Insecure Transmission of Data
Web Attacks: Insecure Transmission of Data

Raxis COO Bonnie Smyre discusses the vulnerabilities that arise when web apps transmit data insecurely[…]

Web Attacks: Clickjacking
Web Attacks: Clickjacking

Many of the external network and web application penetration tests that we perform list ‘clickjacking'[…]