--- title: "#vapt articles | Hashnode" description: "Explore 71 articles tagged #vapt on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/vapt" --- Tag # #vapt 71 posts · 12 followers [Adrian Rolex](https://hashnode.com/@adrianrolex) · [Nov 5](https://hashnode.com/posts/cybersecurity-services-cost-in-2026-assessment-vapt-soc/6aec48c8d9d60d49bf61dfab) ### [Cybersecurity Services Cost in 2026 – Assessment, VAPT & SOC](https://adrianrolex.hashnode.dev/cybersecurity-services-cost-in-2026-assessment-vapt-soc?utm_source=hashnode&utm_medium=feed) Explore cybersecurity services costs in 2026, including security assessments, VAPT, penetration testing and managed SOC pricing for businesses. 6 min read · [adrianrolex.hashnode.dev](https://adrianrolex.hashnode.dev/cybersecurity-services-cost-in-2026-assessment-vapt-soc?utm_source=hashnode&utm_medium=feed) [chaitalisinghania](https://hashnode.com/@chaitali142) · [Oct 28](https://hashnode.com/posts/pentest-vs-bug-bounty-why-mature-security-teams-run-both/6ae1a49f1f92309c5801f84e) ### [Pentest vs Bug Bounty: Why Mature Security Teams Run Both](https://cybersecuritydigest.hashnode.dev/pentest-vs-bug-bounty-why-mature-security-teams-run-both?utm_source=hashnode&utm_medium=feed) Discover key differences between pentesting vs bug bounty programs and learn why mature security teams use both to strengthen application security. 5 min read · [cybersecuritydigest.hashnode.dev](https://cybersecuritydigest.hashnode.dev/pentest-vs-bug-bounty-why-mature-security-teams-run-both?utm_source=hashnode&utm_medium=feed) [Nitya Kaul](https://hashnode.com/@nityakaul99) · [Sep 9](https://hashnode.com/posts/top-10-web-application-vulnerabilities/6aa12d62cd35102b2b3b437e) ### [Top 10 Web Application Vulnerabilities We Still Find in 2026](https://enterprisesecurity.hashnode.dev/top-10-web-application-vulnerabilities?utm_source=hashnode&utm_medium=feed) The pace of software development has never been faster, thanks to cloud architecture and automated code generation. Nevertheless, regardless of all the technological advancements that have occurred, t 5 min read · [enterprisesecurity.hashnode.dev](https://enterprisesecurity.hashnode.dev/top-10-web-application-vulnerabilities?utm_source=hashnode&utm_medium=feed) [shadow Sensei](https://hashnode.com/@shadowsensei) · [Sep 1](https://hashnode.com/posts/pjpt-exam-review-tcm-security/6a970026278027e72e70f3b0) ### [PJPT Certified My Journey](https://shadowsensei-sec.hashnode.dev/pjpt-exam-review-tcm-security?utm_source=hashnode&utm_medium=feed) A complete review of the TCM Security Practical Junior Penetration Tester (PJPT) exam. 8 min read · [shadowsensei-sec.hashnode.dev](https://shadowsensei-sec.hashnode.dev/pjpt-exam-review-tcm-security?utm_source=hashnode&utm_medium=feed) [Yogeshwar Peela](https://hashnode.com/@exploitnotes) · [Sep 1](https://hashnode.com/posts/webversepro-snowedout-writeup/6a96cbdf9d4951f2dcb9645a) ### [WebVersePro : SnowedOut writeup](https://exploitnotes.hashnode.dev/webversepro-snowedout-writeup?utm_source=hashnode&utm_medium=feed) SnowedOut on WebVerseLabs Pro: exploit Pinehollow Plow Tracker with JavaScript injection and forged CSP reports to retrieve the flag. 6 min read · [exploitnotes.hashnode.dev](https://exploitnotes.hashnode.dev/webversepro-snowedout-writeup?utm_source=hashnode&utm_medium=feed) [Daniel Isaac E](https://hashnode.com/@Daniel-Isaac-E) · [Aug 15](https://hashnode.com/posts/the-endpoint-wasn-t-vulnerable-the-attack-chain-was/6a80c023c49321676a19c5df) ### [The Endpoint Wasn't Vulnerable. The Attack Chain Was.](https://danielisaace.hashnode.dev/the-endpoint-wasn-t-vulnerable-the-attack-chain-was?utm_source=hashnode&utm_medium=feed) Introduction The first finding wasn't critical. It wasn't even particularly interesting. There was no SQL Injection. No Remote Code Execution. No authentication bypass. Just an API endpoint that shoul 9 min read · [danielisaace.hashnode.dev](https://danielisaace.hashnode.dev/the-endpoint-wasn-t-vulnerable-the-attack-chain-was?utm_source=hashnode&utm_medium=feed) [Yogeshwar Peela](https://hashnode.com/@exploitnotes) · [Aug 12](https://hashnode.com/posts/tryhackme-lookup-writeup/6a7c3cee9e3057c36d0f3695) ### [TryHackMe : Lookup writeup](https://exploitnotes.hashnode.dev/tryhackme-lookup-writeup?utm_source=hashnode&utm_medium=feed) Complete TryHackMe Lookup walkthrough covering username enumeration, elFinder RCE, SSH access, and sudo look abuse to read the root flag. step by step 7 min read · [exploitnotes.hashnode.dev](https://exploitnotes.hashnode.dev/tryhackme-lookup-writeup?utm_source=hashnode&utm_medium=feed) [1](https://hashnode.com/posts/tryhackme-lookup-writeup/6a7c3cee9e3057c36d0f3695) [Yogeshwar Peela](https://hashnode.com/@exploitnotes) · [Aug 10](https://hashnode.com/posts/tryhackme-overflow-the-jackpot-writeup/6a794fea8a2cc2d5fef1993b) ### [TryHackMe : Overflow The Jackpot writeup](https://exploitnotes.hashnode.dev/tryhackme-overflow-the-jackpot-writeup?utm_source=hashnode&utm_medium=feed) Complete TryHackMe Overflow The Jackpot walkthrough covering crypto, web, forensics, detection engineering, malware analysis, and boot2root. coverage. 35 min read · [exploitnotes.hashnode.dev](https://exploitnotes.hashnode.dev/tryhackme-overflow-the-jackpot-writeup?utm_source=hashnode&utm_medium=feed) [Yogeshwar Peela](https://hashnode.com/@exploitnotes) · [Aug 11](https://hashnode.com/posts/tryhackme-the-london-bridge-writeup/6a7aa0e4edd948b2bf3afa5c) ### [TryHackMe : The London Bridge writeup](https://exploitnotes.hashnode.dev/tryhackme-the-london-bridge-writeup?utm_source=hashnode&utm_medium=feed) TryHackMe London Bridge walkthrough covering SSRF, loopback bypass, root HTTP server, SSH key theft, symlink abuse, and Firefox credential recovery. 18 min read · [exploitnotes.hashnode.dev](https://exploitnotes.hashnode.dev/tryhackme-the-london-bridge-writeup?utm_source=hashnode&utm_medium=feed) [1](https://hashnode.com/posts/tryhackme-the-london-bridge-writeup/6a7aa0e4edd948b2bf3afa5c) [Yogeshwar Peela](https://hashnode.com/@exploitnotes) · [Aug 10](https://hashnode.com/posts/tryhackme-dreaming-writeup/6a7a082596af0ef7870afb00) ### [TryHackMe : Dreaming Writeup](https://exploitnotes.hashnode.dev/tryhackme-dreaming-writeup?utm_source=hashnode&utm_medium=feed) TryHackMe Dreaming walkthrough covering Pluck CMS brute force, CVE-2020-29607 RCE, MySQL command injection, and Python library hijacking. 13 min read · [exploitnotes.hashnode.dev](https://exploitnotes.hashnode.dev/tryhackme-dreaming-writeup?utm_source=hashnode&utm_medium=feed) [1](https://hashnode.com/posts/tryhackme-dreaming-writeup/6a7a082596af0ef7870afb00)