Practical security notes on penetration testing, application security, cloud and compliance.https://rudranetra.com/en-gbhttps://rudranetra.com/blog/extract-ipa-from-iphone-in-one-command/https://rudranetra.com/blog/extract-ipa-from-iphone-in-one-command/getIPA pulls an app off your own jailbroken iPhone and packages it as a decrypted IPA in one command. What you need, how to use it and why decryption matters.Thu, 05 Nov 2026 20:00:00 GMTRudranetra Research TeamMobile SecurityMobile securityiOSToolshttps://rudranetra.com/blog/kerberoasting-explained-for-engineering-managers/https://rudranetra.com/blog/kerberoasting-explained-for-engineering-managers/What Kerberoasting is, why it keeps showing up in Active Directory assessments, and the practical fixes engineering managers can prioritise this quarter.Thu, 05 Nov 2026 09:00:00 GMTRudranetra Research TeamActive DirectoryActive DirectoryKerberosService accountsCredential hygienehttps://rudranetra.com/guides/active-directory-security-assessments-explained/https://rudranetra.com/guides/active-directory-security-assessments-explained/How Active Directory assessments work: attack paths, assumed-breach testing, common weaknesses such as Kerberoasting and AD CS, and how tests stay safe.Thu, 05 Nov 2026 09:00:00 GMTRudranetra Research TeamActive DirectoryActive DirectoryInternal networkAssumed breachIdentity securityhttps://rudranetra.com/blog/mobile-apps-storing-secrets-locally/https://rudranetra.com/blog/mobile-apps-storing-secrets-locally/Anything a mobile app stores or ships can be read by someone holding the device. How secrets leak from iOS and Android apps, and safer ways to handle them.Thu, 29 Oct 2026 09:00:00 GMTRudranetra Research TeamMobile SecurityMobile securityiOSAndroidOWASP MASVShttps://rudranetra.com/guides/api-security-testing-guide/https://rudranetra.com/guides/api-security-testing-guide/The OWASP API Security Top 10 (2023) in plain English: what each risk means, how testers look for it, and what to prepare for an API penetration test.Thu, 29 Oct 2026 09:00:00 GMTRudranetra Research TeamAPI SecurityAPI securityOWASP API Top 10AuthorizationPenetration testinghttps://rudranetra.com/blog/jwt-mistakes-in-apis/https://rudranetra.com/blog/jwt-mistakes-in-apis/JSON Web Tokens are easy to adopt and easy to get wrong. These are the common JWT mistakes in APIs, why they matter, and how to fix each one properly.Thu, 22 Oct 2026 09:00:00 GMTRudranetra Research TeamAPI SecurityJWTAPI securityAuthenticationOWASP API Top 10https://rudranetra.com/guides/mobile-app-penetration-testing-guide/https://rudranetra.com/guides/mobile-app-penetration-testing-guide/What a mobile app pentest covers on iOS and Android, how OWASP MASVS shapes it, what testers need from you, and the issues that come up most often.Thu, 22 Oct 2026 09:00:00 GMTRudranetra Research TeamMobile SecurityMobile securityOWASP MASVSiOSAndroidhttps://rudranetra.com/blog/what-retest-included-should-mean/https://rudranetra.com/blog/what-retest-included-should-mean/Many pentest proposals promise a free retest. Here is what a useful retest covers, when to ask for it, and what evidence you should get back afterwards.Thu, 15 Oct 2026 09:00:00 GMTRudranetra Research TeamComplianceRetestingPenetration testingAudit evidenceRemediationhttps://rudranetra.com/guides/how-to-read-a-penetration-test-report/https://rudranetra.com/guides/how-to-read-a-penetration-test-report/How to read a penetration test report: what severity ratings mean, how to judge the evidence, which findings to fix first, and how the retest closes the loop.Thu, 15 Oct 2026 09:00:00 GMTRudranetra Research TeamApplication Securitypentest reportseverityremediationCVSShttps://rudranetra.com/blog/why-scanners-miss-broken-authorization/https://rudranetra.com/blog/why-scanners-miss-broken-authorization/Automated scanners rarely catch broken authorization. Here is why access control flaws slip past tools, and how a manual tester finds them instead.Thu, 08 Oct 2026 00:00:00 GMTRudranetra Research TeamApplication SecurityAccess controlAuthorizationManual testingVulnerability scanninghttps://rudranetra.com/guides/soc-2-penetration-testing-what-auditors-expect/https://rudranetra.com/guides/soc-2-penetration-testing-what-auditors-expect/What SOC 2 actually says about penetration testing, what auditors look for in a pentest report, and how to time your test around the audit window.Thu, 08 Oct 2026 00:00:00 GMTRudranetra Research TeamComplianceSOC 2Audit evidencePenetration testingCompliancehttps://rudranetra.com/blog/five-things-to-fix-before-your-first-pentest/https://rudranetra.com/blog/five-things-to-fix-before-your-first-pentest/Five quick fixes that help your first penetration test focus on the issues that matter, from security headers to test accounts and secrets in code.Wed, 07 Oct 2026 23:50:00 GMTRudranetra Research TeamApplication SecurityPenetration testingPreparationSecurity hardeningStartupshttps://rudranetra.com/guides/pentest-vs-vulnerability-scan/https://rudranetra.com/guides/pentest-vs-vulnerability-scan/Vulnerability scans and penetration tests both find security problems, but they answer different questions. Learn when each fits and why scans fall short.Wed, 07 Oct 2026 23:50:00 GMTRudranetra Research TeamApplication SecurityPenetration testingVulnerability scanningAudit evidenceSecurity programmehttps://rudranetra.com/blog/idor-in-multi-tenant-saas-explained/https://rudranetra.com/blog/idor-in-multi-tenant-saas-explained/What IDOR is, why it hits multi-tenant SaaS products so hard, and the practical steps engineering teams can take to stop one customer reading another's data.Wed, 07 Oct 2026 23:40:00 GMTRudranetra Research TeamApplication SecurityIDORMulti-tenancyAccess controlSaaS securityhttps://rudranetra.com/guides/how-to-prepare-for-your-first-penetration-test/https://rudranetra.com/guides/how-to-prepare-for-your-first-penetration-test/A practical checklist for your first penetration test: how to set scope, prepare accounts and environments, pick contacts and keep communication clear.Wed, 07 Oct 2026 23:40:00 GMTRudranetra Research TeamApplication Securitypenetration testingpreparationscopingchecklist