From Dev.to Community
Tech Articles
Curated developer articles, tutorials, and guides — auto-updated hourly
Cub4nH15d ago • 5 min read
Come fare penetration testing su applicazioni web
Meta description: Scopri come fare penetration testing su applicazioni web. Guida pratica completa.....
#pentesting#security#hacking#websecurity
1 0
RockyAug 24, 2026 • 3 min read
The Scanner Came Back Clean. The Discount Code Still Worked 40 Times.
The automated scan on a checkout flow came back with nothing above low. No SQLi, no reflected XSS, n...
#appsec#webdev#security#pentesting
0 0
RockyAug 23, 2026 • 3 min read
You Have a Shell as www-data. Now What?
This is a scenario that comes up in interviews and in actual assessments often enough that it's wort...
#cybersecurity#linux#pentesting#infosec
0 0
RockyAug 24, 2026 • 3 min read
You Ran the Deauth Attack Correctly. The Client Just Didn't Care.
You're on-site for a wireless assessment. Evil twin AP is up, same SSID, same encryption type, signa...
#wireless#pentesting#redteam#infosec
0 0
RockyAug 24, 2026 • 3 min read
The Interview Question That Trips Up Junior Red Teamers: What Do You Check Before Mimikatz?
An interview for a junior red team or pentest role, somewhere past the resume small talk: "You're...
#redteam#activedirectory#pentesting#infosec
0 0
Rocky5d ago • 2 min read
Your First Internal Pentest Foothold Makes You Want to Dump Every Credential in Sight. Don't.
You get the call: initial access is granted, a low-privilege domain user account and a jump box, go....
#cybersecurity#pentesting#redteam#activedirectory
0 0
Rocky6d ago • 2 min read
The HSTS Header You Just Marked 'Pass' Doesn't Protect the Request That Actually Matters
You're doing a quick pass on a header checklist before the real testing starts. curl -I comes back.....
#cybersecurity#appsec#pentesting#webdev
0 0
Hüseyin Can3d ago • 11 min read
Zafiyet Bilmeyen Birine XSS Buldurmak
AI agent'ını doğrudan Burp Suite'e bağladım. Sonra pentest'ten hiç anlamayan birine tek cümle yazdır...
#security#ai#mcp#pentesting
0 0
Rocky5d ago • 3 min read
BloodHound Shows No Path to Domain Admin. That's Not the End of the Assessment.
You've got a foothold on an internal engagement, a low-privilege domain user, and you run BloodHound...
#cybersecurity#activedirectory#redteam#pentesting
0 0
Rocky4d ago • 2 min read
Your First Cloud Pentest Isn't Going to Play Out Like Your Last AD Engagement
First cloud-focused engagement, and the plan going in looked like every internal AD assessment befor...
#cybersecurity#cloudsecurity#pentesting#aws
0 0
Rocky4d ago • 3 min read
The MFA Rollout Didn't Stop Us. The Helpdesk Call Did.
The external scope came back clean. Every port that had been open on the last engagement was closed....
#cybersecurity#redteam#socialengineering#pentesting
0 0
Rocky4d ago • 3 min read
The Recon Step You Skim Past at 11PM Is the One That Was Interesting
Day four of a two-week external assessment, scope is a few hundred subdomains wide, and the workflow...
#cybersecurity#pentesting#ai#python
0 1
Rocky1d ago • 2 min read
The Client Said Everything Was HTTPS, So MITM Testing Wasn't in Scope
It comes up on almost every internal engagement scoping call eventually: "we don't really need...
#cybersecurity#pentesting#networking#infosec
0 0
Rocky2d ago • 2 min read
The Shell You Don't Migrate Is a Shell You're About to Lose
A pentester gets a shell on day one of a five-day engagement, from a phishing payload someone finall...
#cybersecurity#metasploit#redteam#pentesting
0 0
Rocky2d ago • 3 min read
The Codebase Was 40,000 Lines and the Engagement Was Three Days Long
A source-available pentest starts with the client handing over a repo, not a URL. This one was a...
#cybersecurity#appsec#ai#pentesting
0 0
Andrzej KlusiewiczAug 24, 2026 • 18 min read
Testy penetracyjne - jak zacząć z pentestami etycznie i skutecznie w 2026
Z bloga JSystems - droga od zera do pierwszego realnego testu penetracyjnego, wraz z przykładem...
#pentesting#cybersecurity#hacking#security
0 0
Andrzej KlusiewiczAug 24, 2026 • 25 min read
OSINT - wywiad otwartoźródłowy: techniki i narzędzia, które musisz znać (2026)
Z bloga JSystems - metodologia i konkretne narzędzia OSINT używane realnie w pracy pentestera, nie.....
#osint#cybersecurity#pentesting#security
0 0