--- title: "#pentest articles | Hashnode" description: "Explore 61 articles tagged #pentest on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/pentest" --- Tag # #pentest 61 posts · 123 followers [Study4Pass](https://hashnode.com/@study4passofficial) · [Nov 5](https://hashnode.com/posts/comptia-pentest-pt0-003-the-exam-that-rewards-methodology-and-reporting-not-tool-trivia/6aec19ff61a5c78fc419f762) ### [CompTIA PenTest+ PT0-003: The Exam That Rewards Methodology and Reporting, Not Tool Trivia](https://study4pass-blog.hashnode.dev/comptia-pentest-pt0-003-the-exam-that-rewards-methodology-and-reporting-not-tool-trivia?utm_source=hashnode&utm_medium=feed) CompTIA PenTest+ PT0-003: The Exam That Rewards Methodology and Reporting, Not Tool Trivia Ask a junior penetration tester what the job is, and they will often describe tools: scanners, exploit framew 9 min read · [study4pass-blog.hashnode.dev](https://study4pass-blog.hashnode.dev/comptia-pentest-pt0-003-the-exam-that-rewards-methodology-and-reporting-not-tool-trivia?utm_source=hashnode&utm_medium=feed) [chaitalisinghania](https://hashnode.com/@chaitali142) · [Oct 28](https://hashnode.com/posts/pentest-vs-bug-bounty-why-mature-security-teams-run-both/6ae1a49f1f92309c5801f84e) ### [Pentest vs Bug Bounty: Why Mature Security Teams Run Both](https://cybersecuritydigest.hashnode.dev/pentest-vs-bug-bounty-why-mature-security-teams-run-both?utm_source=hashnode&utm_medium=feed) Discover key differences between pentesting vs bug bounty programs and learn why mature security teams use both to strengthen application security. 5 min read · [cybersecuritydigest.hashnode.dev](https://cybersecuritydigest.hashnode.dev/pentest-vs-bug-bounty-why-mature-security-teams-run-both?utm_source=hashnode&utm_medium=feed) [Cristiano Gabrieli](https://hashnode.com/@silentrecon) · [Sep 10](https://hashnode.com/posts/compliance-theatre-the-air-gap-they-pretend-exists/6aa25fb94be9dd4ff72f82fb) ### [Compliance Theatre: The Air‑Gap They Pretend Exists](https://crisdigital.hashnode.dev/compliance-theatre-the-air-gap-they-pretend-exists?utm_source=hashnode&utm_medium=feed) Recon\_methods — Learn efficient recon methods, OSINT tactics, and workflow strategies to strengthen your cybersecurity analysis. 21 min read · [crisdigital.hashnode.dev](https://crisdigital.hashnode.dev/compliance-theatre-the-air-gap-they-pretend-exists?utm_source=hashnode&utm_medium=feed) [Emma Engström](https://hashnode.com/@hexemma) · [May 6](https://hashnode.com/posts/cryptography-problems/69fafac650ecad4533f0b5e9) ### [Cryptography Problems in DVWA](https://pentesting-dvwa.hashnode.dev/cryptography-problems?utm_source=hashnode&utm_medium=feed) Introduction Cryptography is used everywhere in modern applications to protect sensitive data such as passwords, session tokens, and personal information. Strong cryptographic algorithms are essential 20 min read · [pentesting-dvwa.hashnode.dev](https://pentesting-dvwa.hashnode.dev/cryptography-problems?utm_source=hashnode&utm_medium=feed) [Emma Engström](https://hashnode.com/@hexemma) · [Mar 12](https://hashnode.com/posts/file-upload/69b31c1793256dfc5309503d) ### [File Upload in DVWA](https://pentesting-dvwa.hashnode.dev/file-upload?utm_source=hashnode&utm_medium=feed) Introduction This post demonstrates how a file upload vulnerability in the Damn Vulnerable Web Application (DVWA) can be exploited to achieve remote code execution. The objective of the attack is to u 15 min read · [pentesting-dvwa.hashnode.dev](https://pentesting-dvwa.hashnode.dev/file-upload?utm_source=hashnode&utm_medium=feed) [Tatiane Pimenta Leal](https://hashnode.com/@TatianePimentaLeal) · [Mar 1](https://hashnode.com/posts/api-security-is-not-a-feature-it-s-a-responsibility/69a47be6a7428b958de0356e) ### [API Security Is Not a Feature — It’s a Responsibility](https://tatianepimentaleal.hashnode.dev/api-security-is-not-a-feature-it-s-a-responsibility?utm_source=hashnode&utm_medium=feed) API Pen-testing as an ethical equalizer for AI tech 3 min read · [tatianepimentaleal.hashnode.dev](https://tatianepimentaleal.hashnode.dev/api-security-is-not-a-feature-it-s-a-responsibility?utm_source=hashnode&utm_medium=feed) [s1de](https://hashnode.com/@s1de) · [Feb 8](https://hashnode.com/posts/archangel-writeup/6988fe7b8a97b4a4ce61e2c1) ### [Archangel Writeup: Log Poisoning and $PATH Hijacking on TryHackMe](https://s1de.hashnode.dev/archangel-writeup?utm_source=hashnode&utm_medium=feed) Master the Archangel CTF: Bypass LFI filters, execute RCE via Apache log poisoning, and hijack SUID $PATH for root privilege escalation. Step-by-step guide. 12 min read · [s1de.hashnode.dev](https://s1de.hashnode.dev/archangel-writeup?utm_source=hashnode&utm_medium=feed) [TH](https://hashnode.com/@H4p00n) · [Jan 30](https://hashnode.com/posts/not-so-common-common-sense-security-insecure-password-storage/697d1c2850d6267da938423f) ### [Not-So-Common, Common-Sense Security: Insecure Password Storage](https://operationally-insecure.hashnode.dev/not-so-common-common-sense-security-insecure-password-storage?utm_source=hashnode&utm_medium=feed) ⚠️ Legal & Ethical DisclaimerThe information presented in this post is provided for educational and informational purposes only. All techniques, tools, and examples discussed are intended to be used only in environments you own or have explicit autho... 5 min read · [operationally-insecure.hashnode.dev](https://operationally-insecure.hashnode.dev/not-so-common-common-sense-security-insecure-password-storage?utm_source=hashnode&utm_medium=feed) [Hồ Quang Anh](https://hashnode.com/@hoquanganh09) · [Jan 29](https://hashnode.com/posts/burp-suite-extension-ho-bien-http-history-thanh-checklist-sach-kin-kit-voi-attack-surface-auto-filter/697b5fa00388a68fac4a195a) ### [Burp Suite Extension: Hô biến HTTP History thành Checklist "Sạch kin kít" với Attack Surface Auto-Filter ️](https://anhbii.hashnode.dev/burp-suite-extension-ho-bien-http-history-thanh-checklist-sach-kin-kit-voi-attack-surface-auto-filter?utm_source=hashnode&utm_medium=feed) "Pentest hiện đại là cuộc chiến chống lại sự nhiễu loạn thông tin (Noise)." Nếu bạn là một Pentester hay Bug Hunter thường xuyên làm việc với các hệ thống Web Application/API phức tạp, chắc chắn bạn đã từng trải qua cảm giác này: Mở Burp Suite lên, l... 6 min read · [anhbii.hashnode.dev](https://anhbii.hashnode.dev/burp-suite-extension-ho-bien-http-history-thanh-checklist-sach-kin-kit-voi-attack-surface-auto-filter?utm_source=hashnode&utm_medium=feed) [TH](https://hashnode.com/@H4p00n) · [Jan 2](https://hashnode.com/posts/not-so-common-common-sense-security-anonymous-enumeration-of-active-directory/695801d75bb9e7fe4534d690) ### [Not-So-Common, Common-Sense Security: Anonymous Enumeration of Active Directory](https://operationally-insecure.hashnode.dev/not-so-common-common-sense-security-anonymous-enumeration-of-active-directory?utm_source=hashnode&utm_medium=feed) ⚠️ Legal & Ethical DisclaimerThe information presented in this post is provided for educational and informational purposes only. All techniques, tools, and examples discussed are intended to be used only in environments you own or have explicit autho... 5 min read · [operationally-insecure.hashnode.dev](https://operationally-insecure.hashnode.dev/not-so-common-common-sense-security-anonymous-enumeration-of-active-directory?utm_source=hashnode&utm_medium=feed)