How To

Master penetration testing with Raxis “How To” tutorials. Get expert, step-by-step guides to uncover and fix vulnerabilities in your organization.

the exploit blog logo
The Exploit: Penetration Testing Insights From The Frontlines

Articles Categorized as How To

  • How to Create an Active Directory Test Environment

    How to Create an AD Test Environment to Use for Penetration Testing

    Andrew Trexler walks us through creating a simple AD test environment to test new hacks before trying them on a penetration test.
    Read More
  • Exploiting GraphQL

    Exploiting GraphQL for Penetration Testing

    Exploiting GraphQL, a query language inspired by the structure & functionality of online data storage & collaboration platforms Meta, Instagram & Google Sheets.
    Read More
  • Log4 Exploit Walkthrough

    Log4j: How to Exploit and Test this Critical Vulnerability on Penetration Tests

    Raxis demonstrates how to obtain a remote shell on a target system during penetration tests using a Log4j open-source exploit available to all. (CVE-2021-44228)
    Read More
  • Exploiting Dirty Pipe (CVE-2022-0847)

    Exploiting Dirty Pipe (CVE-2022-0847)

    The Dirty Pipe vulnerability (CVE-2022-0847) allows any user to write to read-only files, including files that are owned by root, allowing privilege escalation.
    Read More
  • Submit Button

    Hackers See Opportunity Where You See Only a Button

    In this post, Raxis VP Brad Herring explains how web proxy tools can turn even simple buttons and check-boxes into avenues for an attack.
    Read More
  • How to Hire a Penetration Testing Firm Part Two

    How to Hire a Penetration Testing Firm – Part 2

    Is your organization is in the market for a penetration test? Raxis’ COO Bonnie Smyre continues her two-part series on how to hire a penetration testing firm.
    Read More