Tag feed

#pentesting

597 posts283 followers

Explore Hashnode

Alternatives

Trending tags this week

KK4M1_n0_730xk4m1.hashnode.dev3d ago · 15 min read

DC-1: Drupalgeddon2, SUID binary to root shell

So I am going to be starting with this vuln machine. I'd say I'm starting to carve out a methodology with machines like this. First of all, I'll start with a netdiscover to figure out the IP address o

0

SASuresh Attanayakesureshatt.com5d ago · 7 min read

A Practical Guide to AI-Assisted Pentesting for AppSec Teams

Pentesting is a core part of any application security program. Specifically, some organisations use pentesting as the final security gate before production. However, for the AppSec team, pentesting is

0

00x8r41nr07braindump.0x8r41nr07.xyzSep 29 · 5 min read

I Wrote "Being Non-Guided" Twice in One Day.

Part 15 of an ongoing series. [Start from Part 1.] Wednesday night I was filling in my daily wrap-up, the same template I've used for months — what sparked new ideas, what frustrated me, two separate

0

FFalkenkrallettpsandtricks.hashnode.devSep 27 · 9 min read

How To Hack (almost) Every Keypad

Disclaimer I do not have official authorized field experience since I am a student and research is limited for this topic. So most of the techniques shown are brainstormed with a mind shaped by listen

0

Aarosionarosion-labs.hashnode.devSep 23 · 11 min read

BabyTwo

BabyTwo is a medium-difficulty Windows machine set in an Active Directory environment. The initial foothold is gained through password guessing and the abuse of Windows logon scripts. Privilege escala

0

Iinfocodebridgeagency.hashnode.devSep 21 · 3 min read

The Laravel Vulnerability We Find in 60% of SaaS Apps (And the 2-Line Fix)

We audited 40 SaaS applications last quarter. 60% had some version of the same vulnerability in production. Not in staging. Not in an old branch. In production, serving real users, right now. It's cal

0

AJAmartya Jhasecurity-research.hashnode.devSep 17 · 6 min read

Your Perimeter Will Fail. The Real Question Is How Far an Attacker Gets After.

TL;DR: External tests and scanners check your perimeter. Neither answers the question that decides how bad a breach gets: once someone is inside, how far can they go? That is what internal penetration

0

AJAmartya Jhasecurity-research.hashnode.devSep 17 · 8 min read

Your Pentest Report Says "SQL Injection on /api/search." It Won't Say Which Line.

Your Pentest Report Says "SQL Injection on /api/search." It Won't Say Which Line. TL;DR: External penetration testing still matters, but the classic once-a-year model has six structural gaps that hurt

0

KPKrishn Patelai-pentester.hashnode.devSep 14 · 7 min read

Building AI Pentester Week 4:From Endpoints to Security Questions , Building AI Pentester's Application Model

Last week, I changed Recon from a tool launcher into a staged pipeline. It now ends with a correlated surface instead of asking Hunt to interpret unrelated files from every tool. That handoff still ha

0

JJebitoksharonjebitok.comSep 11 · 10 min read

NoScope: Finding RCE (TryHackMe)

Link to the challenge on TryHackMe: NoScope: Finding RCE Introduction Alf.io(opens in new tab) is an open-source, Java/Spring Boot event management platform used by conference organizers, sports clubs

0

#pentesting

Search Hashnode

#pentesting

Explore Hashnode

Trending tags this week

DC-1: Drupalgeddon2, SUID binary to root shell

A Practical Guide to AI-Assisted Pentesting for AppSec Teams

I Wrote "Being Non-Guided" Twice in One Day.

How To Hack (almost) Every Keypad

BabyTwo

The Laravel Vulnerability We Find in 60% of SaaS Apps (And the 2-Line Fix)

Your Perimeter Will Fail. The Real Question Is How Far an Attacker Gets After.

Your Pentest Report Says "SQL Injection on /api/search." It Won't Say Which Line.

Building AI Pentester Week 4:From Endpoints to Security Questions , Building AI Pentester's Application Model

NoScope: Finding RCE (TryHackMe)