Penetration Testing

Discover expert-led penetration testing insights, real-world attack simulations, and best practices to uncover vulnerabilities and strengthen your security.

the exploit blog logo
The Exploit: Penetration Testing Insights From The Frontlines

Articles Categorized as Penetration Testing

  • Five Things to Always Do After Getting Domain Admin

    Five Things to Always Do After Getting Domain Admin

    So you got DA on your red team or internal network penetration test. Here are the five things that Principal Penetration Tester Andrew Trexler does next.
    Read More
  • The Hidden Risks in Your Password: What You Type Matters More Than You Think

    The Hidden Risks in Your Password: What You Type Matters More Than You Think

    Raxis has discovered and cracked our fair share of password hashes. Some that we have discovered may surprise you… and their bosses. Learn what not to do.
    Read More
  • AI-Augmented Series: AI Scripting for Brute-Forcing on a Web App Pentest

    AI-Augmented Series: AI Scripting for Brute-Forcing on a Web App Pentest

    On a recent web app pentest, Andrew Trexler used AI to find client-side code that stopped his brute-force attack then used AI again to thwart that code.
    Read More
  • Wireless Series: Aircrack-ng

    Wireless Series: The Aircrack-ng Suite for All Your Wireless Pentesting Needs

    Principal Penetration Tester Scottie Cole continues our wireless series with the Aircrack-ng Suite, a set of tools for wireless pentest discovery and exploits.
    Read More
  • Data Theft Exploit: DNS Exfiltration Attack

    Data Theft Exploit Part 2: DNS Exfiltration Attack

    Raxis’ Jason Taylor is back with a detailed tutorial on performing both manual and automated DNS exfiltration attacks for pentesting.
    Read More
  • Why 8-Character Passwords Are No Longer Enough: Lessons from the Raxis Password Cracker

    Why 8-Character Passwords Are No Longer Enough: Lessons from the Raxis Password Cracker

    With the start of 2026, the Raxis team is already busy. A new upgrade to our password-cracking system shows how quickly 8-character passwords can be cracked.
    Read More