Research and Blog

Bypassing Anti-Automation Controls

Our approaches to deterring bots and
other automated attacks, and why
rotation cost matters.

Why Your Password Might Be in the Charts - Part 1

Presenting an innovative approach to
password cracking, starting by proving
its effectiveness.

Detecting Cognito Misconfigurations - Part 2

Identifying and confirming Cognito
misconfigurations and proposing an
automated detection approach.

Integrating Custom AI Models with Burp Suite

Integrating private AI models with
Burp Suite using Wilbourne's custom
modular extensions.

Why Your Password Might Be in the Charts - Part 2

Improving the password cracking
process through a series of
experimental password modifications

Blockchain Security Assessments Part 1

Key concepts which security teams
should be aware of before conducting
blockchain assessments.

Introduction to Amazon Cognito Security - Part 1

Understanding misconfigurations in
Amazon Cognito in order to abuse AWS
APIs.

Red-Team vs Pen Test vs Vulnerability Assessment

How you can select the correct type of
cyber security assessment for your
organisation.

Blockchain Security Assessments Part 2

Introducing a framework for reviewing
the security and suitability of a
blockchain network.

Establishing a Mature API Security Strategy

Building a well-defined and
sustainable API security strategy for
your organisation and its developers.

Streamlining Wordlist Workflows within Burp Suite

Easing the process of managing
wordlists through Wilbourne's Burp
Suite extension Wordlist Importer.