The Exploit Blog

Penetration Testing Blog

Offensive security, written by the professionals who live it.

Real attacks, real writeups. The Exploit is written by Raxis penetration testers. We provide technical breakdowns of exploits, CVEs we’ve discovered, and the offensive techniques showing up in current engagements.

  • Cool Tools: NetExec (NXC): The Database

    Cool Tools: The NetExec (NXC) nxcdb Database

    Principal Pentester Scottie Cole continues his NetExec series with nxcdb, the database that automatically stores key info like hosts and creds while you hack.
    , , , ,
    Scottie Cole
    August 11, 2026
    Read More
  • What We Brought Home from DEF CON 34

    What We Brought Home from DEF CON 34

    Raxis pentesters attended DEF CON 34 last weekend. The theme resonated as we see more automated pentest offerings that don’t live up to human expert testers.
    , ,
    Brian Tant
    August 10, 2026
    Read More
  • Raxis at Black Hat 2026

    Raxis at Black Hat USA 2026: Good Conversations & Strong Security

    Black Hat 2026 is in the books, and the Raxis team had great conversations with security-minded folks looking for senior-level human hackers and OT experts.
    , ,
    Brad Herring
    August 7, 2026
    Read More
  • wp2shell: Critical WordPress Unauthenticated to Remote Code Execution Vulnerability

    wp2shell: Critical WordPress Unauthenticated to Remote Code Execution Vulnerability

    It’s rare for WordPress itself to have CVEs. CVE-2026-63030 and CVE-2026-60137 combine to create the critical unauthenticated to RCE vulnerability wp2shell.
    , , , ,
    Jason Taylor
    July 30, 2026
    Read More
  • Rapid Web Host Recon with GoWitness

    Rapid Web Host Recon with GoWitness

    Enumerating webpages during an internal network pentest can be a large task, but GoWitness makes it easy to focus on high value webpages. Learn how it works.
    , , ,
    Jason Taylor
    July 28, 2026
    Read More
  • Raxis at Black Hat 2026: Come Find Us at Booth 6018

    Raxis at Black Hat USA 2026: Come Find Us at Booth 6018

    Raxis will be at Black Hat USA 2026 August 4–6 at Mandalay Bay Convention Center in Las Vegas. Find us at booth 6018.
    ,
    Brad Herring
    July 22, 2026
    Read More
  • Why We Take AI Security Training Seriously at Raxis

    AI-Augmented Series: Why We Take AI Security Training Seriously at Raxis

    Raxis CTO Brian Tant discusses the AI portion of our annual security awareness training and how we take AI security seriously.
    , , , ,
    Brian Tant
    July 14, 2026
    Read More
  • Meet the Pets of Raxis

    Meet the Pets of Raxis

    The Raxis team is serious about cybersecurity and exploits, but today we’re taking a break from that to show off our pets.
    ,
    Bonnie Smyre
    July 8, 2026
    Read More
  • usbliter8 - Apple A12 and A13 SecureROM Exploit

    usbliter8 – Apple A12 and A13 SecureROM Exploit

    The usbliter8 SecureROM exploit is big news for jailbreaking iPhones. This hardware vulnerability cannot be fixed with a software update.
    , ,
    Jason Taylor
    July 3, 2026
    Read More
  • PSE & Red Team Series: Looting

    PSE & Red Team Series: Looting

    Nathan Anderson continues his Physical Social Engineering and Red Team series with the final step: looting. Learn what shows value to stakeholders in reports.
    , ,
    Nathan Anderson
    June 30, 2026
    Read More