@JCSC we are white hat developers but security and reporting of security information are daily responsibilities. Security when applied right still needs updated and ensuring that your applications and data are not the bait attracting new attacks. We would prefer people to call us when they need things done of these natures, but the information is vital for others to learn and adopt better practices as well as possibly being able to solve to solution your self.
Your Data, Your Servers & Your Applications are all just some of the weak points with available exploits. This ownership is a responsibility in which security plays an important but often overlooked role. You are not a current customer so I can't give you all the answers but I thought I would share some information needed to assist you.
Also if you happen to be a CRYPTO Investor understand these are the sorts of tools that can be utilized for an invisible hand to drain your wallets... Which could be better than hard-drive failure, just remember your data security is your responsibility. If you want help I am available @jcsc.biz and we provide services for organizations as needed.
- https://highon.coffee/blog/penetration-testing-tools-cheat-sheet/
- http://www.softwaretestinghelp.com/penetration-testing-tools/
- https://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Project
- https://github.com/PowerShellMafia/PowerSploit
- https://www.wired.com/2016/04/hacker-lexicon-white-hat-gray-hat-black-hat-hackers/
- https://www.cryptoninjas.net/2018/03/27/white-hat-hacker-traces-vulnerabilities-in-8-top-rated-cryptocurrency-exchanges/