Pentest+ Blog Index

Click on the name or phrase to take you to that post. We will add new links to existing posts on an ongoing basis.

ADB (Android Debug Bridge)

Aircrack-ng

Alternate Data Streams
API (Application Programming Interface)
Arachni

ARP Poisoning / Spoofing

(AS) Autonomous System

Atomic Red Team

Attack Surface

Banner Grabbing

BEC (Business Email Compromise)

BloodHound

Blue Team
Bluetooth Pairing Attacks
Bluto

Buffer Overflow

BEC (Business Email Compromise)

Burp Suite
CDN (Content Delivery Network)

CDP (Cisco Discovery Protocol)

Censys.io

CFAA (Computer Fraud and Abuse Act)

Chain of Custody

Choosing a Penetration Testing Provider
Command and Control (C2) Architectures
CrackMapExec

CRC Cyclic Redundancy Check)

Credential Stuffing

CREST

Cross-Site Scripting (XSS)
CVSS v4.0

Dark Web

DAST (Dynamic Application Security Testing)

Deauthentication attack 

Deserialization Attack

dig
DirBuster

Disassociation attack 

DLL Injection
DNS Hijacking

DNSENUM
DREAD

Evil Twin Attacks on WPA2-Enterprise
Evilginx

FOCA

Fuzzing

Golden Ticket Attack

Gophish

hping3

HTML Scraping
HTTP Request Smuggling
Hydra

IaaS (Infrastructure as a Service)

IaC (Infrastructure as Code)

Impacket

inSSIDer

IPSec (IP Security)

ISO/IEC 27001

JSON (JavaScript Object Notation)

Kerberoasting

Key Rotation

Kiosk Escape

Kismet

KPI (Key Performance Indicator)

Kubernetes

LDAP Injection

LFI (Local File Inclusion)
LLM (Large Language Model)
Load Balancing

Lock Picking

LSASS Dumping

MAC Flooding

Mandatory Vacation

Masscan

Metasploit

Microservices
Mimikatz
MITRE ATT&CK 14 Stages

Modbus Attack

Netcat

Nikto

NIST SP 800-115

Nmap

NSE (Nmap Scripting Engine)

nslookup

OCSP (Online Certificate Status Protocol)

OCSP Stapling

OCTAVE

OpenStego

OSINT (Open Source Intelligence)
OSSTMM

OWASP

OWASP Testing Guide

PaaS (Platform as a Service)

Packet Crafting
Parameterized Queries

Password Attacks
Password reuse

Password Spraying Attack

Pass-the-Hash Attack

PBKDF2

PCI DSS

PEAP

PGP (Pretty Good Privacy)

Pharming

Phishing Campaign

Pivoting

Playbook

Playbooks

PLCs (Programmable Logic Controllers)

POP3 (Post Office Protocol 3)

Port Scanning

Process Hollowing

Proxies and Pivoting
PTES (Penetration Testing Execution Standard)

Python
Race Condition

RCE (Remote Code Execution)

Recon-ng

Responder.py

RESTful API

Reverse Engineering

Reverse Shell

RFID Cloning

Right to be Forgotten

Rubeus

SaaS (Software as a Service)
SAN (Storage Area Network)

SCA (Software Composition Analysis)

Scapy

Search Engine Exposure
Security Home Lab
Serverless
Session Hijacking

SET (Social-Engineer Toolkit)

Shodan

Sidecar Scan

Single Pane of Glass

Smishing

SOC 2 Type 1 vs Type 2

Social Engineer Toolkit (SET)

SOW, MSA and MOU
SQLMap
SSRF (Server-Side Request Forgery)

STP Attack

STRIDE

Strings

Supply Chain Security

tcpdump

theHarvester
TOCTOU
Trivy

TruffleHog

Vishing

VLAN Hopping

VTP (VLAN Trunking Protocol)

War Driving

Watering Hole Attack

Web Application Testing Methodology

Web Scraping
WHOIS
WiGLE.net

Windows Privilege Escalation
Worm

WPA TKIP
WPScan

XMAS Tree Scan

XXE Attack

ZAP (Zed Attack Proxy)