Pentest tools and attack techniques, explained, page 2
What the tools and techniques named in a test report do, what a finding means, and how defenders detect and stop each one.
Impacket: The Windows Network Attack Toolkit
Impacket explained: the Python toolkit for Windows network protocols, what its best-known scripts reveal in a pentest report, and the fixes.
Kerbrute: Active Directory User Enumeration Explained
Kerbrute explained: what the Kerberos user enumeration and password spraying tool does, the Windows events it leaves, and how defenders stop it.
Masscan: Internet-Scale Port Scanning Explained
Masscan explained: the fast port scanner that sweeps huge IP ranges, how it differs from Nmap, what its open-port findings mean, and how to spot it.
msfvenom: Payload Generation Explained
msfvenom explained: the Metasploit payload generator, why its old encoders no longer beat modern EDR, and which failed control a finding points to.
NetExec (nxc): The CrackMapExec Successor Explained
NetExec (nxc) is the maintained successor to CrackMapExec, archived in December 2023: what nxc means, what changed, and how defenders detect it.
Responder: LLMNR/NBT-NS Poisoning Explained
Responder explained: how it answers LLMNR, NBT-NS and mDNS lookups to capture Windows credentials, what a finding means, and how to shut it down.
Page 2 of 2 · 30 articles
Not looking for an article? See our penetration testing services, compare penetration testing providers, check the US penetration testing price index, or download the free templates and checklists.
