--- title: "#penetration-testing articles | Hashnode" description: "Explore 545 articles tagged #penetration-testing on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/penetration-testing" --- Tag # #penetration-testing 545 posts · 252 followers [Insomnia](https://hashnode.com/@insom-ai) · [6d ago](https://hashnode.com/posts/what-a-pentest-looks-like-when-seven-ai-agents-run-it-a-tour-of-insomnia/6aec9e742689c9d96bdc7c2b) ### [What a pentest looks like when seven AI agents run it: a tour of Insomnia](https://insomnia-ai.hashnode.dev/what-a-pentest-looks-like-when-seven-ai-agents-run-it-a-tour-of-insomnia?utm_source=hashnode&utm_medium=feed) Insomnia runs a full pentest with a 7-agent AI red team: recon, scanning, exploitation and reporting. Screenshots, demo video, pricing and free SAST CLI. 3 min read · [insomnia-ai.hashnode.dev](https://insomnia-ai.hashnode.dev/what-a-pentest-looks-like-when-seven-ai-agents-run-it-a-tour-of-insomnia?utm_source=hashnode&utm_medium=feed) [404 Founders](https://hashnode.com/@404-founders) · [Nov 2](https://hashnode.com/posts/penetration-testing-frequency-eu-rules-nis2-dora/6ae8a2ff095907b3696718e8) ### [Penetration Testing Frequency: What EU Rules Require](https://404-founders.com/blog/penetration-testing-frequency-eu-rules-nis2-dora?utm_source=hashnode&utm_medium=feed) Penetration testing frequency under NIS2 and DORA: which EU rule sets a number, what CIR 2024/2690 asks for, and what an auditor will want to see. 13 min read · [404-founders.com](https://404-founders.com/blog/penetration-testing-frequency-eu-rules-nis2-dora?utm_source=hashnode&utm_medium=feed) [Beau Carnes](https://hashnode.com/@beaucarnes) · [Oct 29](https://hashnode.com/posts/learn-real-world-penetration-testing-hands-on-ethical-hacking-crash-course/6ae3b3d9439b6aeed8a05ce3) ### [Learn Real-World Penetration Testing: Hands-On Ethical Hacking Crash Course](https://freecodecamp.org/news/learn-real-world-penetration-testing-hands-on-ethical-hacking-crash-course?utm_source=hashnode&utm_medium=feed) Understanding how malicious actors infiltrate networks is the first step to building resilient infrastructure. To help developers and aspiring security analysts learn the fundamentals of offensive sec 2 min read · [freecodecamp.org](https://freecodecamp.org/news/learn-real-world-penetration-testing-hands-on-ethical-hacking-crash-course?utm_source=hashnode&utm_medium=feed) [M1H](https://hashnode.com/@m1h) · [Oct 23](https://hashnode.com/posts/kitsune-ad-cs-esc13-to-domain-admin-via-backup-operators/6adaac3a51d594b3bca6946a) ### [Kitsune: AD CS ESC13 to Domain Admin via Backup Operators](https://m1h.hashnode.dev/kitsune-ad-cs-esc13-to-domain-admin-via-backup-operators?utm_source=hashnode&utm_medium=feed) Active Directory ADCS ESC13 abuse, gMSA password extraction, and Backup Operators lead to full Domain Admin compromise. 7 min read · [m1h.hashnode.dev](https://m1h.hashnode.dev/kitsune-ad-cs-esc13-to-domain-admin-via-backup-operators?utm_source=hashnode&utm_medium=feed) [B1t\_Syph0n](https://hashnode.com/@b1tsyph0n) · [Oct 22](https://hashnode.com/posts/cyberheroes-tryhackme-walkthrough-b1t-syph0n/6ad96adf71b5a7056efd99a0) ### [Cyberheroes TryHackMe Walkthrough | B1t\_Syph0n](https://b1t-syph0n.hashnode.dev/cyberheroes-tryhackme-walkthrough-b1t-syph0n?utm_source=hashnode&utm_medium=feed) Bypassing a web page login form on TryHackMe. 2 min read · [b1t-syph0n.hashnode.dev](https://b1t-syph0n.hashnode.dev/cyberheroes-tryhackme-walkthrough-b1t-syph0n?utm_source=hashnode&utm_medium=feed) [Yogeshwar Peela](https://hashnode.com/@exploitnotes) · [Oct 17](https://hashnode.com/posts/hackthebox-odori-writeup/6ad3588d36a3612f7946912c) ### [HackTheBox: Odori Writeup](https://exploitnotes.hashnode.dev/hackthebox-odori-writeup?utm_source=hashnode&utm_medium=feed) Explore the HTB Odori machine walkthrough: crack BitLocker, extract Windows credentials, bypass restricted SFTP, and escalate to root. 27 min read · [exploitnotes.hashnode.dev](https://exploitnotes.hashnode.dev/hackthebox-odori-writeup?utm_source=hashnode&utm_medium=feed) [M1H](https://hashnode.com/@m1h) · [Oct 13](https://hashnode.com/posts/how-i-got-my-first-official-high-severity-cve-that-leads-to-admin-account-hijacking/6ace3bbb0cc7e2aecdb9aab2) ### [How I Got My First Official High Severity CVE That Leads to Admin Account Hijacking](https://m1h.hashnode.dev/how-i-got-my-first-official-high-severity-cve-that-leads-to-admin-account-hijacking?utm_source=hashnode&utm_medium=feed) How I Got My First Official High Severity CVE That Leads to Admin Account Hijacking 12 min read · [m1h.hashnode.dev](https://m1h.hashnode.dev/how-i-got-my-first-official-high-severity-cve-that-leads-to-admin-account-hijacking?utm_source=hashnode&utm_medium=feed) [Yogeshwar Peela](https://hashnode.com/@exploitnotes) · [Oct 12](https://hashnode.com/posts/tryhackme-plottedtms-writeup/6acce2b1df63bf7d3af1baa0) ### [TryHackMe: PlottedTMS Writeup](https://exploitnotes.hashnode.dev/tryhackme-plottedtms-writeup?utm_source=hashnode&utm_medium=feed) Explore the TryHackMe Plotted room walkthrough covering SQL injection, PHP web shell upload,cron-based privilege escalation, and doas misconfiguration 8 min read · [exploitnotes.hashnode.dev](https://exploitnotes.hashnode.dev/tryhackme-plottedtms-writeup?utm_source=hashnode&utm_medium=feed) [Yogeshwar Peela](https://hashnode.com/@exploitnotes) · [Oct 12](https://hashnode.com/posts/tryhackme-gallery-writeup/6acce4c9df3ff43cd5520a9b) ### [TryHackMe: Gallery Writeup](https://exploitnotes.hashnode.dev/tryhackme-gallery-writeup?utm_source=hashnode&utm_medium=feed) Explore the TryHackMe Gallery walkthrough covering SQL injection, PHP webshell upload, leaked credentials, sudo misconfiguration, and nano privilege. 7 min read · [exploitnotes.hashnode.dev](https://exploitnotes.hashnode.dev/tryhackme-gallery-writeup?utm_source=hashnode&utm_medium=feed) [Ciphemic academia](https://hashnode.com/@ciphemicacademia) · [Oct 10](https://hashnode.com/posts/threat-modeling-vs-penetration-testing-the-80-million-lesson-from-capital-one/6ac9954c4bd71dc727f4256a) ### [Threat Modeling vs. Penetration Testing: The $80 Million Lesson From Capital One](https://ciphemicacademia.hashnode.dev/threat-modeling-vs-penetration-testing-the-80-million-lesson-from-capital-one?utm_source=hashnode&utm_medium=feed) A misconfigured firewall exposed 106 million people. How threat modeling and penetration testing each answer a different question. 13 min read · [ciphemicacademia.hashnode.dev](https://ciphemicacademia.hashnode.dev/threat-modeling-vs-penetration-testing-the-80-million-lesson-from-capital-one?utm_source=hashnode&utm_medium=feed)