Adversary Academy ResearchGeography Based Password Lists for enhanced password cracking success.Recently adversary academy was on an internal penetration testing engagement. Internally we typically run things like responder to see what…Jul 11Jul 11
Adversary Academy ResearchThis Cloud is on Fire! Microsoft Azure Site Recovery EoPDiscovering and Exploiting CVE-2024–21364May 13May 13
Adversary Academy ResearchClocking into The Network — Attacking KronosTimeclock DevicesOne of the services I’m most excited about at Adversary Academy is our targeted vulnerability research (TVR) program. The challenge I’ve…Sep 27, 2023Sep 27, 2023
Adversary Academy ResearchNo Mud No Lotus: The art of transforming breaches through security improvementIn Buddhist philosophy I often hear the expression “No Mud, No Lotus” this expression aligns with the Buddhist view that life and existence…Mar 9, 20231Mar 9, 20231
Adversary Academy ResearchConfessions of a bug bounty program managerIn my previous article I wrote about my experiences as a top ranked bug bounty hunter. In this article I will write about my experiences on…Feb 17, 2023Feb 17, 2023
Adversary Academy ResearchConfessions of a top-ranked bug bounty hunterFrom 2016 to 2017 I was very active in the bug bounty space, working almost exclusively with Synack. My first year doing bug bounties I was…Feb 15, 2023Feb 15, 2023
Adversary Academy ResearchPatch diffing CVE-2022–21907Our security team does an in-depth analysis of critical security vulnerabilities when they are released on patch Tuesday. This patch…Jan 12, 2022Jan 12, 2022
Adversary Academy ResearchRoot cause analysis on unusual stack writing functions with IDA.A common problem when doing vulnerability research and exploit development is identifying interesting components within binary code. Static…Jan 9, 2022Jan 9, 2022
Adversary Academy ResearchThe Seven Habits of Highly Effective Purple TeamsAs we are approaching the new year I've been thinking about the milestones and achievements that I’ve been able to accomplish both…Jan 2, 2022Jan 2, 2022
Adversary Academy ResearchCVE-2021–3310 Western Digital MyCloud PR4100 Link Resolution Information Disclosure VulnerabilityPwn2own is something like the “academy awards” for exploits and like any good actor… or in this case hacker I dreamt of my chance on the…Jun 15, 2021Jun 15, 2021
