Pentest+ Blog Index

Click on the name or phrase to take you to that post. We will add new links to existing posts on an ongoing basis.

ADB (Android Debug Bridge)

Aircrack-ng

Alternate Data Streams
API (Application Programming Interface)
Arachni

ARP Poisoning / Spoofing

(AS) Autonomous System

Atomic Red Team

Banner Grabbing

BEC (Business Email Compromise)

BloodHound

Buffer Overflow

BEC (Business Email Compromise)

CDN (Content Delivery Network)

CDP (Cisco Discovery Protocol)

Censys.io

CFAA (Computer Fraud and Abuse Act)

Chain of Custody

CrackMapExec

CRC Cyclic Redundancy Check)

Credential Stuffing

CREST

CVSS v4.0

Dark Web

DAST (Dynamic Application Security Testing)

dig
DirBuster

DLL Injection
DNS Hijacking

DREAD

Evilginx

FOCA

Fuzzing

Golden Ticket Attack

Gophish

hping3

HTML Scraping
Hydra

IaaS (Infrastructure as a Service)

IaC (Infrastructure as Code)

Impacket

inSSIDer

IPSec (IP Security)

JSON (JavaScript Object Notation)

Kerberoasting

Key Rotation

Kiosk Escape

Kismet

KPI (Key Performance Indicator)

Kubernetes

LDAP Injection

LLM (Large Language Model)
Load Balancing

Lock Picking

LSASS Dumping

MAC Flooding

Mandatory Vacation

Masscan

Metasploit

Microservices
MITRE ATT&CK 14 Stages

Modbus Attack

Netcat

Nikto

NIST SP 800-115

Nmap

NSE (Nmap Scripting Engine)

nslookup

OCSP (Online Certificate Status Protocol)

OCSP Stapling

OCTAVE

OpenStego
OSSTMM

OWASP

OWASP Testing Guide

PaaS (Platform as a Service)

Parameterized Queries

Password reuse

Password Spraying Attack

Pass-the-Hash Attack

PBKDF2

PCI DSS

PEAP

PGP (Pretty Good Privacy)

Pharming

Phishing Campaign

Pivoting

Playbook

PLCs (Programmable Logic Controllers)

POP3 (Post Office Protocol 3)

Process Hollowing

PTES (Penetration Testing Execution Standard)

Python
Race Condition

Recon-ng

Responder.py

RESTful API

Reverse Engineering

Reverse Shell

RFID Cloning

Right to be Forgotten

Rubeus

SaaS (Software as a Service)
SAN (Storage Area Network)

SCA (Software Composition Analysis)

Scapy

Serverless
Session Hijacking

SET (Social-Engineer Toolkit)

Shodan

Sidecar Scan

Single Pane of Glass

Smishing

SOC 2 Type 1 vs Type 2

Social Engineer Toolkit (SET)

SQLMap
SSRF (Server-Side Request Forgery)

STRIDE

Strings

Supply Chain Security

tcpdump

Trivy

TruffleHog

Vishing

VLAN Hopping

VTP (VLAN Trunking Protocol)

War Driving

Watering Hole Attack

WiGLE.net

Worm

WPA TKIP
WPScan

XMAS Tree Scan

XXE Attack

ZAP (Zed Attack Proxy)