How To

Master penetration testing with Raxis “How To” tutorials. Get expert, step-by-step guides to uncover and fix vulnerabilities in your organization.

the exploit blog logo
The Exploit: Penetration Testing Insights From The Frontlines

Articles Categorized as How To

  • Data Theft Exploit: DNS Exfiltration Attack
    Data Theft Exploit Part 2: DNS Exfiltration Attack
    Raxis’ Jason Taylor is back with a detailed tutorial on performing both manual and automated DNS exfiltration attacks for pentesting.
    Read More
  • Cross-Site Scripting (XSS): Cookie Theft - Advanced Payloads
    Cross-Site Scripting (XSS): Cookie Theft – Advanced Payloads
    We reached into our vaults to bring you the final video in our cross-site scripting (XSS) series. Learn about cookie theft, website defacement, and CSRF attacks.
    Read More
  • Data Theft Exploit: DNS Exfiltration Setup
    Data Theft Exploit Part 1: DNS Exfiltration Setup
    Raxis Lead Penetration Tester Jason Taylor’s in-depth tutorial explains setting up a server for DNS exfiltration. Check back next month to run the attack.
    Read More
  • PSE & Red Team Series: Badge Cloning
    PSE & Red Team Series: Badge Cloning
    Lead Penetration Tester Nathan Anderson is back with more PSE and red team advice, this time looking into three tools he uses to clone badges and gain access.
    Read More
  • Lateral Movement: From Beachhead to Breach
    Lateral Movement: From Beachhead to Breach
    Raxis Senior Penetration Tester Nate Jernigan discusses lateral movement in penetration testing and the methods and tools he uses when performing these attacks.
    Read More
  • Cool Tools Series: Croc
    Cool Tools Series: Croc for Secure Data Exfiltration
    Lead Penetration Tester Nathan Anderson provides tips on using croc for secure data exfiltration just like he does on red team engagements.
    Read More