Guides

Penetration testing & vulnerability scanning guides

Practical, vendor-neutral guides for security engineers, sysadmins and red teams.

๐Ÿ›ฐ๏ธ

How to run a network vulnerability scan

A step-by-step walkthrough โ€” from authorization and target selection to scanning, triage and reporting.

๐Ÿ”ฅ

What are EPSS and CISA KEV?

How exploit-probability scoring and the known-exploited catalog turn a flat CVE list into a real fix-first order.

๐Ÿงฐ

Best free open-source penetration testing tools

A practical roundup of free pentest and vulnerability-scanning tools, and where each one fits.

๐Ÿ“…

CISA KEV weekly digest

Every week's newly exploited vulnerabilities, ranked by EPSS, with public exploits and patch deadlines.