How To

Master penetration testing with Raxis “How To” tutorials. Get expert, step-by-step guides to uncover and fix vulnerabilities in your organization.

the exploit blog logo
The Exploit: Penetration Testing Insights From The Frontlines

Articles Categorized as How To

  • SQL Injection Attack

    SQLi Series: SQL Timing Attacks for Penetration Testing

    Andrew Trexler’s SQLi Series is back, demonstrating SQL Timing Attacks using MySQL’s sleep function in Blind SQL Injection attacks for penetration testing.
    Read More
  • SQL Injection

    SQLi Series: An Introduction to SQL Injection for Penetration Testing

    Raxis’ Andrew Trexler explains what SQL Injection (SQLi) is and how to perform a simple exploit against a web app login page in penetration tests.
    Read More
  • AD Series: Resource Based Constrained Delegation (RBCD) Exploits

    AD Series: Resource Based Constrained Delegation (RBCD) for Penetration Testing

    Exploit msDS-AllowedToActOnBehalfOfOtherIdentitity to gain administrative access in a Resource Based Constrained Delegation (RBCD) attack on penetration tests.
    Read More
  • AD Series: Active Directory Certificate Services (ADCS) Exploits Using NTLMRelayx.py

    AD Series: Active Directory Certificate Services (ADCS) Exploits Using NTLMRelayx.py for Penetration Tests

    Andrew Trexler ran into issues with certipy when testing on port 443 and found that NTLMRelayx.py worked better in for those ADCS Exploits on penetration tests.
    Read More
  • Active Directory Certificate Services (ADCS) Misconfiguration Exploits

    AD Series: Active Directory Certificate Services (ADCS) Misconfiguration Exploits for Penetration Tests

    Andrew Trexler adds to his AD series with a tutorial of Active Directory Certificate Services (ADCS) misconfiguration exploits for penetration tests.
    Read More
  • Broadcast Attacks - Responder

    AD Series: How to Perform Broadcast Attacks Using NTLMRelayx, MiTM6 and Responder for Penetration Tests

    Andrew Trexler continues his AD Series with an in-depth tutorial on broadcast Attacks using NTLMRelayx, MiTM6 and Responder for penetration tests.
    Read More