How To

Master penetration testing with Raxis “How To” tutorials. Get expert, step-by-step guides to uncover and fix vulnerabilities in your organization.

the exploit blog logo
The Exploit: Penetration Testing Insights From The Frontlines

Articles Categorized as How To

  • Metasploit Module: Azure AD Login Scanner

    New Metasploit Module for Penetration Testing: Azure AD Login Scanner

    Raxis’ Matt Dunn has published another Metasploit module, this one describing a vulnerability in Azure’s Active Directory Seamless Single Sign-on. Learn more here.
    Read More
  • Cross-Site Scripting: Filter Evasion & Sideloading Payloads

    Cross-Site Scripting (XSS): Filter Evasion and Sideloading

    In this second in a series, learn how to perform Cross-Site Scripting (XSS) attacks such as filter evasion and sideloading content.
    Read More
  • Introduction to Cross-Site Scripting

    Introduction to Cross-Site Scripting

    This video covers the basics of cross-site scripting, including reflected, stored, and DOM-based XSS as well as remediation to protect against these attacks.
    Read More
  • Clickjacking causes user to unknowingly purchase tickets

    Realistically Assessing the Threat of Clickjacking Today: A Penetration Tester Perspective

    Raxis’ Lead Developer Adam Fernandez discusses clickjacking, explaining what it is and why it represents less of a threat now than it once did. Adam also talks about how clickjacking differs from similar attacks.
    Read More
  • LDAP Passback

    LDAP Passback and Why We Harp on Passwords

    LDAP passback exploits are easy when companies fail to change default passwords on network devices or fail to assign a password at all. If you connect it, you must protect it.
    Read More