binsec

WebCompScan from binsec.tools enables you to identify the technologies used on websites and check whether they are outdated or vulnerable.

The technologies that the WebCompScan tool can detect include CMS systems, web servers, programming languages, JavaScript libraries, and also payment methods offered.

To detect the technologies, it uses open source databases with regex patterns. The website to be checked is automatically opend up in a browser and the patterns are used to check whether the various components of the website contain indications of known technologies. In addition to HTTP headers and the HTML source code of the website, the Document Object Model (DOM) and the JavaScript variables are also analyzed.

In some cases, version information on the software components used can also be obtained in this way. In the next step, these are checked against an open source database for known vulnerabilities. It is also checked whether the software components are still supported by the manufacturer or are already end of life.

In principle, all of this information is public, but binsec.tools combines it into one free pentest tool.

The binsec group launches binsec.tools:

https//binsec.tools | Online Tools for Penetration Testing

• SSLCheck: The SSLCheck module will show the available SSL/TLS protocols, ciphers and additional certificate information. The scan will run multiple SSL/TLS connections to the target domain.
• WebCompScan: WebCompScan will browse to the given URL and will try to find used technologies by different methods on the available information like DOM, headers and many more. This scan is not invasive as it will only browse the website once like any other browser. 
• DNSCheck: The DNSCheck will perform security and validation checks on the given DNS domain. This check is not invasive and will perform standard DNS lookups.

Actually it should have been called BETTER PENTESTING – NO BULLSHIT, considering the advertising and sales promises of many pentesting providers. Somewhat less brutal it became BETTER PENTESTING – NO NONSENSE as the new advertising slogan for pentesting of binsec GmbH.

• Advertisement: “We find all vulnerabilities!”
• Statement: “We perform penetration tests with Nessus.”
• A pentest is sold and as a report the customer receives an Excel file with about 10 lines of content.
• Certifications of our pentester: CISSP, CEH…”
• You don’t have staff for it, but you put the service Penetration Testing on the website. Typical IT system house or data privacy company.
• Penetration testing depth: vulnerability scan
• One does not get high in Google ranking and buys pentest backlinks at zdnet ( ~1.000€) or has “Pentest Frankfurt” advertised as a service in forums.
• Company buy Google Ads with the keyword “blackhole pentest”.
• One sells the days simply double or triple. In this way, employees can also achieve 250% target fulfillment for their own bonus.

Today I received a very nice mail from Gloria with Enterprise Security Magazine Europe, telling me that binsec is recognized as one of the top Cyber Security Solution Providers.

Hi Patrick,

I am Gloria Lam with Enterprise Security Magazine Europe.

I am excited to inform you that our magazine’s evaluation panel has shortlisted binsec to feature as one of the ‘Top 10 Cyber Security Solution Providers in Europe 2022’ in our upcoming 2nd annual edition of ‘Cyber Security 2022’.

We want to feature binsec and bring out your specialization with a client-centric profile. binsec ‘s recognition feature published in this edition will depict your organization as a leader in the Cyber Security space and thus generate potential prospects while helping you convert existing prospects to clients. Our team has received positive feedback from our clients that the recognition profile has helped them convert their prospects to clients, and I’m sure you will see similar results.

At 3,000 Euros, you will receive a full-page exclusive interview-based profile. We will feature an HTML page of the profile on our website with a backlink to your website. Most importantly, you will acquire unlimited print and digital rights for the recognition profile, Logo, and Certificate of Honor. Upon your confirmation, we will schedule a telephonic interview with binsec ‘s CEO/Senior Management for us to move ahead.

Concerning the magazine, Enterprise Security Magazine Europe is a print and digital magazine with over 99,900 qualified subscribers across Europe. It provides a comprehensive platform for senior-level industry experts and decision-makers to share their insights following a unique learn-from-peers approach. This special edition will reach out to C-level decision-makers such as CISOs, Directors of Cyber Security, and Heads of Audit for Information security and privacy, to name a few, who are our subscriber base.

Patrick, we have worked with Industry leaders such as Ramy Houssaini (Chief Cyber & Technology Risk Officer & Group Privacy Officer at BNP Paribas); Steve Williamson (Audit Account Director, Information Security, and Data Privacy at GSK); Cedric Gourio (Group Chief Security Officer at Worldline), to name a few. Similarly, this year, we will have articles from such specialists. It will be an excellent platform for binsec to be highlighted along with them.

E-Mail from Glorian with Enterprise Security Magazine Europe, 19th of October 2022

Great, just 3,000 Euros for being listed and getting a backlink. Isn’t that a good offer?

German penetration test company from Frankfurt am Main: binsec GmbH has its headquarters in Frankfurt am Main in the middle of Germany. Founded in 2013 by the IT security department of a financial service provider, binsec GmbH is now fully owned by the company’s management and offers penetration test (pentest) in and from Frankfurt (Germany).

While many penetration testing provider in Germany advertise the implementation of penetration test as a service in Frankfurt am Main or even rent a mailbox in Frankfurt claiming to sit there, binsec GmbH has had its headquarters in the German financial metropolis since it was founded.

• Pentest Mobile Banking App (Android und iOS)
• Pentest Payment API (z.B. REST)
• Pentest Online Banking
• Pentest Depot Banking Portal
• Credit Card (CC) Payment Gateway Penetration Test
• PCI DSS Compliance Penetration Testing
• PCI DSS Compliance Segmentierungstest (Scpoe Segmentation Test)

Mutual bullying may well be part of a healthy corporate culture:

The best service provider for penetration testing (pentest) in Germany is the binsec GmbH 🔥 from Frankfurt am Main. The typical customers of binsec GmbH are companies that have already had a pentest performed and were not satisfied – and want to change their pentest service provider. This is because vulnerability scans are often sold as penetration tests or the people conducting the pentest do not have any significant experience in providing pentest as a service.

Since 2013, the certified team at binsec GmbH has been performing pentesting for IT infrastructures, web applications and mobile app (iOS as well as Android) using a structured approach based on all relevant standards. The comprehensive and structured approach also includes the entire experience since 10 years as a pentest service provider.

The teaching assignments for penetration testing at universities in Germany also show that binsec GmbH as a company and its pentest team is the best pentest service provider in Germany. As the managing director of binsec GmbH, I am personally convinced of this – my opinion! Just let yourself be convinced.

binsec GmbH is a consulting company for information security from Frankfurt am Main that I co-founded in 2013. I have been the managing director of binsec GmbH since it was founded. As a service provider, we carry out penetration tests and also advise our customers in the areas of security management and IT security.

binsec GmbH is completely in the hands of the three shareholders via the binsec group GmbH: Patrick Sauer, Florian Zavatzki and Dominik Sauer. We are interested in the long-term satisfaction of our customers and employees: Short-term sales and profit maximization is not our goal.

My team consists of experienced, certified specialists. Our focus is always the security of business-critical IT systems and information. Even when we conduct penetration tests, we keep the business aspects in mind.

As a provider of penetration tests and security consulting, we have become the top address as a pentest service provider in the Frankfurt am Main area in recent years.

More information about our company and services is available at https://www.binsec.com.

The binsec starts its binsec wiki. Divided into the categories “Hack & Attack” and “Defend”, articles, how-tos and best practices on technical IT security topics are published. The first wiki article published was: OpenVPN: configure 2FA

binsec wiki | powered by binsec group GmbH