The Exploit Blog | Penetration Testing & Cybersecurity Insights by Raxis

Discover the Art of Penetration Testing

The Exploit is Raxis’ cybersecurity blog where penetration testers and red team experts share real-world insights, attack techniques, and strategies to strengthen defenses against evolving threats. We feature expert advice, detailed breakdowns of exploits, and practical guidance to help organizations understand and respond to today’s most pressing security challenges.

Meet Our Team

Exploiting GraphQL for Penetration Testing

By bjager

Posted in Exploits, How To

Exploiting GraphQL, a query language inspired by the structure & functionality of online data storage & collaboration platforms Meta, Instagram & Google Sheets.

Brice Jager, Lead Penetration Tester

By bjager

Posted in Meet Our Team

Brice Jager, a lead penetration tester at Raxis whose career ranges from health care, to health care technology, and now to penetration testing.

Log4j: How to Exploit and Test this Critical Vulnerability on Penetration Tests

By Mark Puckett

Posted in Exploits, How To

Raxis demonstrates how to obtain a remote shell on a target system during penetration tests using a Log4j open-source exploit available to all. (CVE-2021-44228)

RAXIS THREAT ALERT: VULNERABILITY IN OPENSSL v3.0.x

By Brad Herring

Posted in Exploits

In the cyberworld, news of a critical vulnerability affecting OpenSSL versions 3.0 – 3.0.6 will likely be the scariest part of Halloween ’22.

CVE-2022-35739: PRTG Network Monitor Cascading Style Sheets (CSS) Injection

By Raxis Research Team

Posted in Exploits

This CSS vulnerability, discovered by Raxis’ Matt Mathur, lies in a device’s properties and how they are verified and displayed within PRTG Network Monitor.

What to Expect with a Raxis Wireless Penetration Test

By Scottie Cole

Posted in Security Recommendations

Wireless attacks are typically low-risk, high-reward opportunities that don’t often require direct interaction. See more about a wireless penetration test.