Tag

#pentest

61 posts123 followers

Explore Hashnode

Alternatives

CompTIA PenTest+ PT0-003: The Exam That Rewards Methodology and Reporting, Not Tool Trivia

CompTIA PenTest+ PT0-003: The Exam That Rewards Methodology and Reporting, Not Tool Trivia Ask a junior penetration tester what the job is, and they will often describe tools: scanners, exploit framew

9 min readstudy4pass-blog.hashnode.dev

chaitalisinghaniaOct 28

Pentest vs Bug Bounty: Why Mature Security Teams Run Both

Discover key differences between pentesting vs bug bounty programs and learn why mature security teams use both to strengthen application security.

5 min readcybersecuritydigest.hashnode.dev

Cristiano GabrieliSep 10

Compliance Theatre: The Air‑Gap They Pretend Exists

Recon_methods — Learn efficient recon methods, OSINT tactics, and workflow strategies to strengthen your cybersecurity analysis.

21 min readcrisdigital.hashnode.dev

Emma EngströmMay 6

Cryptography Problems in DVWA

Introduction Cryptography is used everywhere in modern applications to protect sensitive data such as passwords, session tokens, and personal information. Strong cryptographic algorithms are essential

20 min readpentesting-dvwa.hashnode.dev

Emma EngströmMar 12

File Upload in DVWA

Introduction This post demonstrates how a file upload vulnerability in the Damn Vulnerable Web Application (DVWA) can be exploited to achieve remote code execution. The objective of the attack is to u

15 min readpentesting-dvwa.hashnode.dev

Tatiane Pimenta LealMar 1

API Security Is Not a Feature — It’s a Responsibility

API Pen-testing as an ethical equalizer for AI tech

3 min readtatianepimentaleal.hashnode.dev

s1deFeb 8

Archangel Writeup: Log Poisoning and $PATH Hijacking on TryHackMe

Master the Archangel CTF: Bypass LFI filters, execute RCE via Apache log poisoning, and hijack SUID $PATH for root privilege escalation. Step-by-step guide.

12 min reads1de.hashnode.dev

THJan 30

Not-So-Common, Common-Sense Security: Insecure Password Storage

⚠️ Legal & Ethical DisclaimerThe information presented in this post is provided for educational and informational purposes only. All techniques, tools, and examples discussed are intended to be used only in environments you own or have explicit autho...

5 min readoperationally-insecure.hashnode.dev

Hồ Quang AnhJan 29

Burp Suite Extension: Hô biến HTTP History thành Checklist "Sạch kin kít" với Attack Surface Auto-Filter ️

"Pentest hiện đại là cuộc chiến chống lại sự nhiễu loạn thông tin (Noise)." Nếu bạn là một Pentester hay Bug Hunter thường xuyên làm việc với các hệ thống Web Application/API phức tạp, chắc chắn bạn đã từng trải qua cảm giác này: Mở Burp Suite lên, l...

6 min readanhbii.hashnode.dev

THJan 2

Not-So-Common, Common-Sense Security: Anonymous Enumeration of Active Directory