PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

What Is Penetration Testing? How Does It Work Step-by-Step?

hackerone.com | vulnerability | #privilege-escalation | #penetration-testing | #ethical-hacking | #security-testing | #guide
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A step-by-step explainer of penetration testing: authorized attempts to breach systems, covering scoping, vulnerability scanning, privilege escalation, and physical techniques like dropped USB drives.
Published
Collected

Related coverage

vulnerability · blog.quarkslab.com
MyReport Updater: From gRPC to SYSTEM
MyReport is a report generation software often used as a component of web-based applications. We describe a privilege escalation and remote code execution vulnerabilities in MyReport Updater 2.1.1 through its update configuration and gRPC service.
vulnerability · blog.quarkslab.com
Cato VPN Client: Split-Tunnel and Privilege Escalation (CVE-2026-10739)
Local privilege escalation in the Cato VPN Client through the split-tunnel upload flow, from named pipe to SYSTEM delete and Windows Installer rollback.
blog · hackenproof.com
What Is Penetration Testing? How It Works, What You Get, and When to Test
A pentest is a time-boxed, authorized attack where ethical hackers chain flaws to prove exploitable risk, not just run scans. It outlines deliverables, audit drivers, and when to test.
blog · netspi.com
Penetration Testing: Stopping an Unstoppable Windows Service
Pen testers often disable antivirus before moving toolkits, but some Windows services resist being stopped. This post explains service configurations and a simple way to stop the stubborn ones.
vulnerability · yeswehack.com
How to write an effective Bug Bounty report
Guide to effective Bug Bounty reports: a pre-submission checklist (scope, qualifying bugs, impact), impact statements with realistic scenarios, behaviour analysis and winning report structure.
vulnerability · yeswehack.com
9 rules for a successful first-time Bug Bounty Program
Nine rules for a successful first Bug Bounty program: clear team roles, a dedicated manager, a detailed brief, efficient triage, transparent payments and integration with internal remediation.
Back