How To

Master penetration testing with Raxis “How To” tutorials. Get expert, step-by-step guides to uncover and fix vulnerabilities in your organization.

the exploit blog logo
The Exploit: Penetration Testing Insights From The Frontlines

Articles Categorized as How To

  • Cool Tools: NetExec (NXC): The Database

    Cool Tools: The NetExec (NXC) nxcdb Database

    Principal Pentester Scottie Cole continues his NetExec series with nxcdb, the database that automatically stores key info like hosts and creds while you hack.
    Read More
  • Rapid Web Host Recon with GoWitness

    Rapid Web Host Recon with GoWitness

    Enumerating webpages during an internal network pentest can be a large task, but GoWitness makes it easy to focus on high value webpages. Learn how it works.
    Read More
  • PSE & Red Team Series: Looting

    PSE & Red Team Series: Looting

    Nathan Anderson continues his Physical Social Engineering and Red Team series with the final step: looting. Learn what shows value to stakeholders in reports.
    Read More
  • Building Security Tools from Source to Bypass Endpoint Security

    Building Security Tools from Source to Bypass Endpoint Security

    Endpoint security detects many malicious files created with pentest tools, but pentesters can sometimes bypass this by rebuilding source code. Learn how here.
    Read More
  • Cool Tools: Bloodhound CE

    Cool Tools: Bloodhound CE

    BloodHound’s Community Edition has everything a penetration tester needs to enumerate relationships in a domain in order to gain more access, even Domain Admin.
    Read More
  • Defense in Depth Against Linux Kernel Privilege Escalation

    Defense in Depth Against Linux Kernel Privilege Escalation: A Practical Guide for Container Workloads

    With current local privilege escalation exploits like Copy Fail and Dirty Frag active in the wild, harden your defenses to halt attacks even before patching.
    Read More