HTB Blog > Red Teaming

During the Summer of 2024, several internet service providers (ISPs) & managed service providers (MSPs) were the target of a zero-day vulnerability being used by a Volt Typhoon.

Demand for ICS pentesting and OT security is on the rise. We break down the specialist skillsets needed to keep our world running smoothly.

Follow this Metasploit Framework tutorial for a comprehensive overview of module types, targets, payloads, and much more!

Pro Labs is a cornerstone for red team skills development. Utilized by both new professionals who’ve graduated to full-time employees and businesses who are building their security teams.

We dissect the Snowflake Breach through the lens of the MITRE ATT&CK framework.

From gnawing imposter syndrome to communication challenges with execs, cyber pros at DEF CON anonymously shared their “unfiltered truths” about working in the industry. Can you relate?

The truth about completing content to build real-world hacking & cybersecurity skills, even “Easy” ones

Four beginner-friendly website hacking techniques to try on your next pentest (with live “follow-along” examples)!

Your third rift has brought you some sense of normalcy. But don’t get too comfy, there’s work to be done.

The adoption of AI and ML is steadily growing. See how this addition to our Challenge category aims to test users looking to exploit this turn-of-the-century-tech!

We explore the key capabilities of this Cuttlefish Malware through the lens of the MITRE ATT&CK framework.

Web applications are always online, which makes these five common web attacks very dangerous to companies. Learn how to exploit and defend against them today!

Use our Nmap cheatsheet for essential commands including host discovery, network and port scanning, and firewall evasion.

How dev teams can integrate secure code reviews that are realistic, sustainable, and respect development lifecycles.

Discover the most essential commands for scanning, host discovery, and evasion using Nmap.

Penetration tests are a detailed hands-on exploration of an organization’s weaknesses while vulnerability assessments quickly identify risks without going deeper. Here’s why you need both.

Discover the most common Kerberos attacks that every red teamer should know (and analysts fear), and learn how to execute them with real-world examples.

Our 2024 guide on web application penetration testing is perfect for beginners. Learn to identify vulnerabilities, exploit weaknesses, and report findings ethically.