Exploits

Discover expert insights on the latest exploits, penetration testing tactics, and real-world vulnerabilities to strengthen your cybersecurity defenses.

the exploit blog logo
The Exploit: Penetration Testing Insights From The Frontlines

Articles Categorized as Exploits

  • CVE‑2020‑12812 and Why It’s Still an Issue Five Years Later

    CVE‑2020‑12812 and Why It’s Still an Issue Five Years Later

    Principal Penetration Tester Scottie Cole explains why Fortinet released a new security advisory about CVE‑2020‑12812 and what your organization should check.
    Read More
  • Data Theft Exploit: DNS Exfiltration Attack

    Data Theft Exploit Part 2: DNS Exfiltration Attack

    Raxis’ Jason Taylor is back with a detailed tutorial on performing both manual and automated DNS exfiltration attacks for pentesting.
    Read More
  • Why 8-Character Passwords Are No Longer Enough: Lessons from the Raxis Password Cracker

    Why 8-Character Passwords Are No Longer Enough: Lessons from the Raxis Password Cracker

    With the start of 2026, the Raxis team is already busy. A new upgrade to our password-cracking system shows how quickly 8-character passwords can be cracked.
    Read More
  • Cross-Site Scripting (XSS): Cookie Theft - Advanced Payloads

    Cross-Site Scripting (XSS): Cookie Theft – Advanced Payloads

    We reached into our vaults to bring you the final video in our cross-site scripting (XSS) series. Learn about cookie theft, website defacement, and CSRF attacks.
    Read More
  • Data Theft Exploit: DNS Exfiltration Setup

    Data Theft Exploit Part 1: DNS Exfiltration Setup

    Raxis Lead Penetration Tester Jason Taylor’s in-depth tutorial explains setting up a server for DNS exfiltration. Check back next month to run the attack.
    Read More
  • Salesforce Compromise: What You Need to Know

    Salesforce Compromise: What You Need to Know

    The FBI has released information to help organizations that are affected by recent attacks against Salesforce. Raxis’ Jason Taylor sums up next steps here.
    Read More