How To

Master penetration testing with Raxis “How To” tutorials. Get expert, step-by-step guides to uncover and fix vulnerabilities in your organization.

the exploit blog logo
The Exploit: Penetration Testing Insights From The Frontlines

Articles Categorized as How To

  • Penetration Testing Types

    How to Hire a Penetration Testing Firm – Part 1

    Raxis’ COO Bonnie Smyre offers some helpful hints about how to start the process of hiring a penetration testing company.
    Read More
  • Matt Dunn Mathur

    Reporting Tools for Large Penetration Tests

    Raxis lead penetration tester Matt Dunn has developed three new tools to make it easier to compile and present findings from large penetration tests.
    Read More
  • Offensive Security OSCP

    So, You Want to Earn Your OSCP?

    What’s it like to earn your OSCP? Raxis senior penetration tester Andrew Trexler talks about his experience preparing for and taking the exam.
    Read More
  • Metasploit Module: Azure AD Login Scanner

    New Metasploit Module for Penetration Testing: Azure AD Login Scanner

    Raxis’ Matt Dunn has published another Metasploit module, this one describing a vulnerability in Azure’s Active Directory Seamless Single Sign-on. Learn more here.
    Read More
  • Cross-Site Scripting: Filter Evasion & Sideloading Payloads

    Cross-Site Scripting (XSS): Filter Evasion and Sideloading

    In this second in a series, learn how to perform Cross-Site Scripting (XSS) attacks such as filter evasion and sideloading content.
    Read More
  • Introduction to Cross-Site Scripting

    Introduction to Cross-Site Scripting

    This video covers the basics of cross-site scripting, including reflected, stored, and DOM-based XSS as well as remediation to protect against these attacks.
    Read More