Tag feed

#pentesting

590 posts283 followers

Explore Hashnode

Alternatives

Trending tags this week

AJAmartya Jhasecurity-research.hashnode.dev1d ago · 6 min read

Your Perimeter Will Fail. The Real Question Is How Far an Attacker Gets After.

TL;DR: External tests and scanners check your perimeter. Neither answers the question that decides how bad a breach gets: once someone is inside, how far can they go? That is what internal penetration

0

AJAmartya Jhasecurity-research.hashnode.dev1d ago · 8 min read

Your Pentest Report Says "SQL Injection on /api/search." It Won't Say Which Line.

Your Pentest Report Says "SQL Injection on /api/search." It Won't Say Which Line. TL;DR: External penetration testing still matters, but the classic once-a-year model has six structural gaps that hurt

0

KPKrishn Patelai-pentester.hashnode.dev3d ago · 7 min read

Building AI Pentester Week 4:From Endpoints to Security Questions , Building AI Pentester's Application Model

Last week, I changed Recon from a tool launcher into a staged pipeline. It now ends with a correlated surface instead of asking Hunt to interpret unrelated files from every tool. That handoff still ha

0

JJebitoksharonjebitok.com6d ago · 10 min read

NoScope: Finding RCE (TryHackMe)

Link to the challenge on TryHackMe: NoScope: Finding RCE Introduction Alf.io(opens in new tab) is an open-source, Java/Spring Boot event management platform used by conference organizers, sports clubs

0

JMJames Millerjamesmiller459.hashnode.devSep 10 · 7 min read

Why Authenticated Security Testing is Becoming Essential for Modern Web Applications

What happens after an attacker gets past your login page? That is where many web application security gaps become dangerous, because critical vulnerabilities often exist behind authenticated access. A

0

AJAmartya Jhasecurity-research.hashnode.devSep 9 · 25 min read

External Penetration Testing in 2026: A Technical Methodology, Tool Stack, and Attack Surface Guide

External penetration testing is often reduced to a familiar sequence: nmap → nuclei → Burp → report That workflow is useful, but it misses the hardest part of the engagement. Finding the assets worth

0

AJAmartya Jhasecurity-research.hashnode.devSep 9 · 13 min read

Why Your $6,500 Penetration Test Will Cost You More Than the $47,000 One

Two penetration testing quotes land in your inbox. One says $6,500. The other says $22,000. Both vendors say they use AI. Both promise comprehensive coverage. Both have credible-looking reports, exper

0

NKNitya Kaulenterprisesecurity.hashnode.devSep 9 · 5 min read

Top 10 Web Application Vulnerabilities We Still Find in 2026

The pace of software development has never been faster, thanks to cloud architecture and automated code generation. Nevertheless, regardless of all the technological advancements that have occurred, t

0

JJebitoksharonjebitok.comSep 8 · 30 min read

Mobile Application Security (TryHackMe)

Link to the challenge/Walkthrough on TryHackMe: Mobile Application Security Introduction Mobile devices are everywhere. We use them to bank, communicate, shop, and store some of our most sensitive per

0

AJAmartya Jhasecurity-research.hashnode.devSep 8 · 11 min read

IDOR: The Vulnerability Class Your Scanners Will Never Find

In 2023, a researcher changed a single number in a URL, /api/orders/10021 to /api/orders/10022, and got back a complete order record belonging to someone else. Name, address, items purchased, last fou

0

#pentesting

Search Hashnode

#pentesting

Explore Hashnode

Trending tags this week

Your Perimeter Will Fail. The Real Question Is How Far an Attacker Gets After.

Your Pentest Report Says "SQL Injection on /api/search." It Won't Say Which Line.

Building AI Pentester Week 4:From Endpoints to Security Questions , Building AI Pentester's Application Model

NoScope: Finding RCE (TryHackMe)

Why Authenticated Security Testing is Becoming Essential for Modern Web Applications

External Penetration Testing in 2026: A Technical Methodology, Tool Stack, and Attack Surface Guide

Why Your $6,500 Penetration Test Will Cost You More Than the $47,000 One

Top 10 Web Application Vulnerabilities We Still Find in 2026

Mobile Application Security (TryHackMe)

IDOR: The Vulnerability Class Your Scanners Will Never Find