https://kevinsec.io/tags/pentest/Recent content in Pentest on KevinSecHugoen-usFri, 10 Jul 2026 00:00:00 +0000https://kevinsec.io/blog/how-to-think-like-hackers/Fri, 10 Jul 2026 00:00:00 +0000https://kevinsec.io/blog/how-to-think-like-hackers/A practical guide to developing hacker mindset: reverse thinking, logic abuse, zero trust, system decomposition, and attack chaining.https://kevinsec.io/blog/api-broken-authentication-common-testing-patterns/Wed, 08 Jul 2026 00:00:00 +0000https://kevinsec.io/blog/api-broken-authentication-common-testing-patterns/A practical checklist for identifying broken authentication patterns in APIs, from token handling to weak login flows and session lifecycle issues.https://kevinsec.io/blog/cvss-for-pentesters-how-to-think-about-severity/Wed, 08 Jul 2026 00:00:00 +0000https://kevinsec.io/blog/cvss-for-pentesters-how-to-think-about-severity/A practical guide for pentesters on using CVSS as a severity framework while still explaining real business impact clearly.https://kevinsec.io/blog/how-to-write-a-professional-vulnerability-report/Wed, 08 Jul 2026 00:00:00 +0000https://kevinsec.io/blog/how-to-write-a-professional-vulnerability-report/A practical guide to writing clear, reproducible, and business-focused vulnerability reports for web application security testing.https://kevinsec.io/blog/ssrf-explained-for-developers-and-pentesters/Wed, 08 Jul 2026 00:00:00 +0000https://kevinsec.io/blog/ssrf-explained-for-developers-and-pentesters/A practical explanation of Server-Side Request Forgery, why it happens, how to test it safely, and how developers can prevent it.