--- title: "#redteaming articles | Hashnode" description: "Explore 131 articles tagged #redteaming on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/redteaming" --- Tag # #redteaming 131 posts · 54 followers [Rodrigo Martinez Nuñez](https://hashnode.com/@rsh21) · [3d ago](https://hashnode.com/posts/from-developer-to-attacker-automatic-authentication-bypasses-with-python/6af0feb9c312080bf865ab39) ### [From Developer to Attacker: Automatic Authentication Bypasses with python](https://ctfcap.hashnode.dev/from-developer-to-attacker-automatic-authentication-bypasses-with-python?utm_source=hashnode&utm_medium=feed) Introduction Authentication is the front door of any web application, yet it remains one of the most frequently misconfigured components. Drawing from my experience developing backend systems in Djang 8 min read · [ctfcap.hashnode.dev](https://ctfcap.hashnode.dev/from-developer-to-attacker-automatic-authentication-bypasses-with-python?utm_source=hashnode&utm_medium=feed) [1](https://hashnode.com/posts/from-developer-to-attacker-automatic-authentication-bypasses-with-python/6af0feb9c312080bf865ab39) [Vivek Chhediya](https://hashnode.com/@vivekchhediya) · [Oct 13](https://hashnode.com/posts/ai-agent-red-teaming-for-beginners-what-it-is-and-how-to-start/6ace2b6d0b65134c97859c7d) ### [AI Agent Red Teaming for Beginners: What It Is and How to Start](https://vivekchhediya.hashnode.dev/ai-agent-red-teaming-for-beginners-what-it-is-and-how-to-start?utm_source=hashnode&utm_medium=feed) Learn AI agent red teaming with practical steps to uncover prompt injection, tool misuse and permission failures before deployment. 5 min read · [vivekchhediya.hashnode.dev](https://vivekchhediya.hashnode.dev/ai-agent-red-teaming-for-beginners-what-it-is-and-how-to-start?utm_source=hashnode&utm_medium=feed) [Aeon Flex / Splicer Scorn](https://hashnode.com/@voidrane) · [Sep 17](https://hashnode.com/posts/tool-poisoning-on-mcp-servers-the-attack-vector-nobody-s-patching/6aac410df674884b2113de42) ### [Tool Poisoning on MCP Servers: The Attack Vector Nobody's Patching](https://chaincoder.hashnode.dev/tool-poisoning-on-mcp-servers-the-attack-vector-nobody-s-patching?utm_source=hashnode&utm_medium=feed) Everybody's shipping AI agents. Nobody's auditing their toolchains. 7 min read · [chaincoder.hashnode.dev](https://chaincoder.hashnode.dev/tool-poisoning-on-mcp-servers-the-attack-vector-nobody-s-patching?utm_source=hashnode&utm_medium=feed) [1](https://hashnode.com/posts/tool-poisoning-on-mcp-servers-the-attack-vector-nobody-s-patching/6aac410df674884b2113de42) [Ahmed Awad ( NullC0d3 )](https://hashnode.com/@nullc0d3) · [Aug 20](https://hashnode.com/posts/hunterx-v7-0-0-less-noise-more-verified-findings/6a86a677fdeedb50b8cc9a44) ### [🐺 HunterX v7.0.0 - Less Noise. More Verified Findings.](https://nullc0d3.hashnode.dev/hunterx-v7-0-0-less-noise-more-verified-findings?utm_source=hashnode&utm_medium=feed) A few months ago, HunterX was an idea. Today, HunterX v7.0.0 is out — and people are actually using it. 🚀 2,200+ Docker pulls ⭐ 1,200+ GitHub stars 🌎 Listed across major cybersecurity communities An 3 min read · [nullc0d3.hashnode.dev](https://nullc0d3.hashnode.dev/hunterx-v7-0-0-less-noise-more-verified-findings?utm_source=hashnode&utm_medium=feed) [ZeroProtocol](https://hashnode.com/@zeroprotocol) · [Aug 14](https://hashnode.com/posts/client-side-web-security-essentials/6a7f33383b0e0f5ca46f1155) ### [Client-Side Web Security Essentials](https://webpentestingdeepdive.hashnode.dev/client-side-web-security-essentials?utm_source=hashnode&utm_medium=feed) Learn how HTML, JavaScript, DOM, Ajax, JSON, forms, cookies, and sessions shape web applications and their security attack surface. 8 min read · [webpentestingdeepdive.hashnode.dev](https://webpentestingdeepdive.hashnode.dev/client-side-web-security-essentials?utm_source=hashnode&utm_medium=feed) [Chris Sheridan](https://hashnode.com/@auto-majicly) · [Jul 28](https://hashnode.com/posts/teaching-an-autonomous-pentest-agent-to-prove-a-breach-not-just-claim-one/6a69208645b2202968e78dc3) ### [Teaching an Autonomous Pentest Agent to Prove a Breach — Not Just Claim One](https://halosecurityhasnodedev.hashnode.dev/teaching-an-autonomous-pentest-agent-to-prove-a-breach-not-just-claim-one?utm_source=hashnode&utm_medium=feed) A challenge-response nonce that proves a real shell popped—not a tarpit faking uid=0. Inside HALO's stdlib exploit-delivery ladder. 5 min read · [halosecurityhasnodedev.hashnode.dev](https://halosecurityhasnodedev.hashnode.dev/teaching-an-autonomous-pentest-agent-to-prove-a-breach-not-just-claim-one?utm_source=hashnode&utm_medium=feed) [Ahmed Awad ( NullC0d3 )](https://hashnode.com/@nullc0d3) · [Jul 28](https://hashnode.com/posts/hunterx-the-ai-powered-offensive-security-platform-redefining-red-teaming-bug-bounty-hunting-and-penetration-testing/6a690dcb527c9b982dfa9572) ### [HunterX: The AI-Powered Offensive Security Platform Redefining Red Teaming, Bug Bounty Hunting, and Penetration Testing](https://nullc0d3.hashnode.dev/hunterx-the-ai-powered-offensive-security-platform-redefining-red-teaming-bug-bounty-hunting-and-penetration-testing?utm_source=hashnode&utm_medium=feed) Traditional Vulnerability Scanners Are Reaching Their Limits The cybersecurity industry has spent decades improving vulnerability scanners. They became faster. They became capable of sending millions 9 min read · [nullc0d3.hashnode.dev](https://nullc0d3.hashnode.dev/hunterx-the-ai-powered-offensive-security-platform-redefining-red-teaming-bug-bounty-hunting-and-penetration-testing?utm_source=hashnode&utm_medium=feed) [Yash Bhardwaj](https://hashnode.com/@yashb) · [Jul 23](https://hashnode.com/posts/vulnerability-assessment-vs-penetration-testing/6a61e5f5bec32326efa588ec) ### [Vulnerability Assessment vs. Penetration Testing: Why Both Are Essential for Modern Cybersecurity](https://data-privacy.hashnode.dev/vulnerability-assessment-vs-penetration-testing?utm_source=hashnode&utm_medium=feed) Learn the differences between Vulnerability Assessment and Penetration Testing (VAPT), why organizations need both. 6 min read · [data-privacy.hashnode.dev](https://data-privacy.hashnode.dev/vulnerability-assessment-vs-penetration-testing?utm_source=hashnode&utm_medium=feed) [Ayesha Khan](https://hashnode.com/@ayeshakhalil) · [Jul 22](https://hashnode.com/posts/defending-llms-what-actually-works-and-where-it-still-breaks/6a613cf6032c881a9a74b390) ### [Defending LLMs: What Actually Works, and Where It Still Breaks](https://ayeshakoder.hashnode.dev/defending-llms-what-actually-works-and-where-it-still-breaks?utm_source=hashnode&utm_medium=feed) Part 2 of the LLM security series: how sandwich defenses, privilege separation & output validation actually stop prompt injection & jailbreaks. 8 min read · [ayeshakoder.hashnode.dev](https://ayeshakoder.hashnode.dev/defending-llms-what-actually-works-and-where-it-still-breaks?utm_source=hashnode&utm_medium=feed) [Vivek Goswami](https://hashnode.com/@vivekgoswami) · [Jul 19](https://hashnode.com/posts/tryhackme-s-room-tomghost-walkthrough/6a5ca19f8b090b79d8b9f6fa) ### [TryHackMe’s Room - Tomghost Walkthrough](https://vivekgoswami.hashnode.dev/tryhackme-s-room-tomghost-walkthrough?utm_source=hashnode&utm_medium=feed) Reconnaissance I usually begin with a classic Network Mapper(nmap) scan with the service version detection and aggressive scanning. As we can see here 22,53,8009,8080 are in open state 8080 HTTP wit 2 min read · [vivekgoswami.hashnode.dev](https://vivekgoswami.hashnode.dev/tryhackme-s-room-tomghost-walkthrough?utm_source=hashnode&utm_medium=feed)