Field-tested technical analyses, vulnerability research and threat intelligence
Real operation analyses, CVE discoveries and defense recommendations from the Netlore Security research and red team.
Three Years, Three Decisions, One Breach: The Silent Story of an API Vulnerability
A vulnerability closed in 2024 led to the exposure of 3,000 corporate customers' data in 2026.
CVE-2025-69848: Reflected XSS in NetBox ProtectedError Handling
Technical analysis of a Reflected XSS vulnerability discovered by the Netlore Security research team in the NetBox platform. Caused by improper use of Django's mark_safe(), this flaw affects all versions from 2.11.0 through 3.7.x.
PSRansom Readiness Assessment: Bypassing MDE on a Hardened Windows 11 Endpoint
A full-scope ransomware readiness engagement using PSRansom against a Windows 11 enterprise endpoint protected by Microsoft Defender for Endpoint. Step-by-step walkthrough of AMSI bypass, ETW tampering, obfuscation chains, and C2 key-exchange redesign — with operational code masked.
NTLM Coercion Attacks: Technical Analysis and Mitigation Strategies
A comprehensive examination of NTLM Coercion techniques, attack vectors, and the critical security measure of disabling NTLM authentication.
Kerberoasting to Domain Admin: A Complete Active Directory Attack Chain
A detailed technical walkthrough of a real-world red team engagement where Kerberoasting was used as the pivotal technique to escalate from a low-privileged domain user to Domain Admin. Covers SPN enumeration, offline hash cracking, pass-the-ticket lateral movement, and full MITRE ATT&CK mapping with blue team detection recommendations.
Red Team Operation: LockBit Ransomware Simulation - Technical Case Study
Detailed technical analysis of a Red Team operation simulating LockBit ransomware group tactics in a corporate environment. Attack chain with compromised VPN, Cobalt Strike C2 infrastructure, and custom evasion techniques, mapped to MITRE ATT&CK framework with comprehensive findings and recommendations.
Be the first to know about new posts
Get technical analyses, CVE discoveries and red team case studies straight to your inbox.