Blog

Research

Technique breakdowns and what we find in real engagements.

Aug 18, 2026

VPN Phishing: Initial Access Without a Malicious Implant

A malwareless initial access technique that abuses Windows' built-in VPN client. The target dials into an attacker-controlled VPN server, the operator joins the same tunnel, and reach into the workstation happens over legitimate M...

Read article

4 min read

Jan 21, 2026

PRT Tokens: From Initial Access to Long-Term Cloud Control

Primary Refresh Tokens (PRTs) sit at the core of Azure AD authentication, quietly enabling seamless access across cloud and hybrid environme...

Read article

3 min read

Aug 20, 2025

Hijacking Azure PowerShell Authentication Flow

While looking into some interesting Azure attacks I came upon something interesting when using the Connect-AzAccount Connect-AzAccount......

Read article

4 min read

Jul 23, 2025

A Day Phishing

Scripting Interpreters Interpreters are a great method to achieve command or shellcode execution Are not Native to Windows Not always......

Read article