PHP2Shell and UpdraftCentral Keys: Two PHP Threats to Fix Now
Patch PHP2Shell (CVE-2026-109618, CVE-2026-109619) and remove stolen UpdraftCentral keys. Raxis explains how to check exposure and fix both PHP threats.
Penetration Testing Blog
Offensive security, written by the professionals who live it.
Cool Tools: NetExec (NXC) – Modules Deep Dive
Learn how NetExec (NXC) modules speed up internal pentests. Scottie Cole covers GPP passwords, LAPS, Zerologon checks, and coerce_plus with example commands.
French Supermarket Hack: When OT Security Failures Reach the Food Supply
The French supermarket hack exploited unpatched, internet-facing Danfoss controllers. Learn why OT security gaps like this persist and how to close them.
OpenAI’s AI Agents Breached Hugging Face: Why Guardrails Matter
With guardrails lowered, OpenAI’s AI agents chained vulnerabilities and breached Hugging Face. Here’s what the incident means for your AI and network security.
Cool Tools: Stunnel for Bypassing DPI
Pentesters often need to bypass Deep Packet Inspection (DPI), network IPS, and SOC detection by disguising network traffic. Learn how stunnel does just that.
Auditing Passwords with Domain Password Audit Tool (DPAT)
Learn how to use the Domain Password Audit Tool (DPAT) that helps you discover if policies are bypassed and if new policies need to be in place.
Choosing a Penetration Testing Company: Physical Pentesting
Onsite physical pentesting includes both social aspects like tailgating and technical tests such as badge cloning. Choose a company with the whole package.
Better API Endpoint Enumeration: Testing for the #1 OWASP Security Vuln
Broken Access Controls is at the top of the OWASP Top 10. The difficulty is finding each instance to test. Learn 3 ways to enumerate API endpoints thoroughly.
Choosing a Penetration Testing Company: Operational Technology (OT)
Operational Technology pentesting is highly specialized and needs to be performed by experienced OT testers. Learn how to choose the best pentest company.
We Went on a SharePoint Expedition, and Here’s What We Found
Of the nearly 30,000 public facing SharePoint portals we found, approximately 3,300 are self-hosted meaning they are vulnerable to the critical CVE-2026-50522.
Rooting a Google Pixel 8 for Mobile App Penetration Testing
Principal Penetration Tester Andrew Trexler takes us step-by-step through the process of rooting a Google Pixel for mobile application pentesting.
Cool Tools: The NetExec (NXC) nxcdb Database
Principal Pentester Scottie Cole continues his NetExec series with nxcdb, the database that automatically stores key info like hosts and creds while you hack.
296 posts, newest first.