© 2026 Hashnode
What is Enumeration? It is one of the most important parts of Penetration Testing process. It is identifying all of the ways we could attack a target. We must do our best in this phase. Long story short - enumeration is collecting as much information...

Transferring files During any penetration testing exercise, it is likely that we will need to transfer files to the remote server. There are few options for this: One method is running a Python HTTP server on our machine and then using wget or cUR...

Privilege Escalation Once we gain initial access to a box, we want to thoroughly enumerate the box to find any potential vulnerabilities we can exploit to achieve a higher privilege level. There are checklists for privilege escalation online. A goo...

Some good note taking options Notepad++ GitBook (has fetures to host a page or make wiki page) Cherrytree Evernote Sublime Text Notion Visual Studio Code It is important to make sure that any client data is only stored locally and not synced...

Proof of Concept Proof of Concept (PoC) or Proof of Principle is a project management term. In project management, it serves as proof that a project is feasible in principle. We confirm discovered vulnerabilities. We prepare steps that shows the vu...

After pre-engagement phase is completed, information gathering begins. It’s a phase where we gather all available information about the company. This is the phase which we return to multiple times. OSINT Open source intelligence is a great way to gat...
