Penetration Testing Services | BDDK, EPDK, SPK and TSE Compliant Cybersecurity

An end-to-end technical analysis of a real red team engagement conducted under written authorization: from anonymous access to a meeting room and copying the door booking tablet's MAC to bypass NAC (802.1X/MAB), through an unauthenticated MongoDB, a clear-text domain password, a Trend Micro Apex One pre-auth deserialization RCE (CVE-2025-49219), SYSTEM via PrintSpoofer, and Domain Admin through a shared local admin. The fall of an entire forest without a single 0-day, with blue-team defenses for each stage.

A vulnerability closed in 2024 led to the exposure of 3,000 corporate customers' data in 2026.

Technical analysis of a Reflected XSS vulnerability discovered by the Netlore Security research team in the NetBox platform. Caused by improper use of Django's mark_safe(), this flaw affects all versions from 2.11.0 through 3.7.x.