The Exploit

Penetration Testing Blog

Offensive security, written by the professionals who live it.

Real Attacks, Real Writeups

Goodies for Hoodies: TCP Timestamps

Does your penetration test always return a low-risk finding about TCP Timestamps? Why worry about it? Because it gives hackers info to use in other attacks.

Raxis API Tool

Raxis Lead Developer, Adam Fernandez, has developed a tool to use for testing JSON-based REST APIs, and we’re sharing this tool on GitHub to help API developers test their own code during the SDLC process and to prepare for third-party API penetration tests.

297 posts, newest first.

Request a quote

Tell Us What You Need Tested

We usually respond in one business day.

Please let us know what's on your mind. Include any details about your target environment, timeline, or compliance drivers.