Articles hub
Article collection

Ethical Hacking & Penetration Testing articles

Recon, testing workflows, exploitation basics, and professional reporting

Learn practical offensive security concepts including reconnaissance, vulnerability discovery, exploitation basics, reporting, responsible testing, and common pentesting workflows.

Browse full catalogArticles hub

Collection snapshot

—

Published articles in this collection

Best for: Aspiring pentesters, bug bounty hunters, and red-team learners

…

Published articles

7

Example topics

3

Learning paths

How to use this collection

Read → apply → reference

Each article is written as a practical knowledge block you can use on the job, in labs, or during audits.

1

Learn the concept

Understand the threat, control, or workflow with clear explanations.

2

Follow the checklist

Apply steps, commands, or evidence collection in your environment.

3

Connect to practice

Jump to related labs, tutorials, and tools to reinforce skills.

Example topics in this collection

  • Reconnaissance
  • Vulnerability scanning
  • Web application testing
  • Network pentesting
  • Exploitation basics
  • Reporting
  • Legal and ethical boundaries

Catalog

Articles in ethical hacking & penetration testing

Practical guides, checklists, and explainers focused on this security domain.

Outcomes

What you'll learn

  • Follow ethical hacking methodology within legal and authorized boundaries
  • Practice reconnaissance, scanning, and vulnerability analysis workflows
  • Write findings suitable for pentest reports and security assessments
  • Bridge offensive reading with labs, tools, and career roadmaps

More topics

Explore other article collections

Jump between fundamentals, offensive security, blue team, cloud, compliance, and more.

Cybersecurity Fundamentals

Core security concepts, threat models, and the mindset every defender needs

View collection

Web Application Security

OWASP risks, injection flaws, access control, APIs, and secure development

View collection

Linux Security

SSH hardening, permissions, auditd, firewalls, logging, and CIS controls

View collection

SOC & Blue Team

SIEM alerts, log analysis, triage workflows, and blue-team investigation

View collection

Incident Response

Detect, contain, investigate, eradicate, recover, and learn from incidents

View collection

Cloud Security

IAM, logging, network controls, storage security, and misconfiguration detection

View collection

DevSecOps

Secure CI/CD, secret scanning, SAST/DAST, containers, and pipeline automation

View collection

Compliance & GRC

Frameworks, controls, audit evidence, policies, and GRC workflows

View collection

Security Tools & Platforms

Practical guides for scanners, SIEM, testing, and investigation platforms

View collection

Network Security

Segmentation, firewalls, VPNs, DNS, IDS/IPS, and packet analysis

View collection

Cryptography

Encryption, hashing, TLS, certificates, signatures, and key management

View collection