SQL Injection
SQLi Series: An Introduction to SQL Injection

In this first in a new series, Raxis’ Andrew Trexler explains what SQL Injection (SQLi)[…]

AD Series: Resource Based Constrained Delegation (RBCD) Exploits
AD Series: Resource Based Constrained Delegation (RBCD)

Learn to exploit msDS-AllowedToActOnBehalfOfOtherIdentitity to gain administrative access in a Resource Based Constrained Delegation (RBCD)

AD Series: Active Directory Certificate Services (ADCS) Exploits Using NTLMRelayx.py
AD Series: Active Directory Certificate Services (ADCS) Exploits Using NTLMRelayx.py

Raxis lead penetration tester Andrew Trexler comes back to Active Directory Certificate Services (ADCS) exploits,[…]

Active Directory Certificate Services (ADCS) Misconfiguration Exploits
AD Series: Active Directory Certificate Services (ADCS) Misconfiguration Exploits

Raxis lead penetration tester Andrew Trexler walks us through several attacks on misconfigured Active Directory[…]

Broadcast Attacks - Responder
AD Series: How to Perform Broadcast Attacks Using NTLMRelayx, MiTM6 and Responder

Raxis lead penetration tester Andrew Trexler walks us through several broadcast attacks using NTLMRelayx, MiTM6,[…]

How to Create an Active Directory Test Environment
How to Create an AD Test Environment

This post will show you how to setup a simple Active Directory (AD) test environment.[…]

Exploiting GraphQL
Exploiting GraphQL

This post will show you how to take advantage of some weak spots in GraphQL.

Log4 Exploit Walkthrough
Log4j: How to Exploit and Test this Critical Vulnerability

In this article, Raxis’ CEO Mark Puckett describes how penetration testers and ethical hackers can[…]

Exploiting Dirty Pipe (CVE-2022-0847)
Exploiting Dirty Pipe (CVE-2022-0847)

Andrew Trexler, Raxis senior penetration tester demonstrates how to exploit the “Dirty Pipe” vulnerability (CVE-2022-0847).

Submit Button
Hackers See Opportunity Where You See Only a Button

In this post, Raxis VP Brad Herring explains how web proxy tools can turn even[…]

How to Hire a Penetration Testing Firm Part Two
How to Hire a Penetration Testing Firm Part Two

Raxis’ COO Bonnie Smyre continues her two-part series on how to hire a penetration testing

Penetration Testing Types
How to Hire a Penetration Testing Firm – Part 1

Raxis’ COO Bonnie Smyre offers some helpful hints about how to start the process of[…]