Thanks and those are very solid advice.
You mentioned having a discussion with potential pentesters at their firm would help, any advice on how to evaluate pentesters given that we probably know much less on the topic compared with those pentesters?
You mentioned having a discussion with potential pentesters at their firm would help, any advice on how to evaluate pentesters given that we probably know much less on the topic compared with those pentesters?
For example, my infra+hardware guy reported mousejack vulnerability as an extra observation during 2.4 Ghz spectrum security assessment. The core scope was wifi spectrum, but since he had an understanding of devices operating in that spectrum, he was able to compromise vulnerable wireless mice (logitech ones) at a client which operated in the same spectrum. Most OSWP guys don’t even know about it, you can have my word on it.