Chris Hernandez·6d agoRunning iOS in a Virtual Machine on Apple SiliconThere is a question that every mobile security team, enterprise MDM vendor, and every iOS CI/CD pipeline eventually runs into: How do you…
Chris Hernandez·Apr 18, 2025Top 10 High Impact Free and Open Source offensive toolsWhether you’re a seasoned red teamer or just diving into the world of offensive security, the right tools make all the difference. In this…
Chris Hernandez·Aug 1, 2024Pwn2Own Miami: Aveva Edge Arbitrary DLL Loading VulnerabilityThis article covers the vulnerability I discovered while researching the Aveva Edge attack surface for Pwn2Own Miami a few years ago. It’s…
Chris Hernandez·Jul 11, 2024Geography Based Password Lists for enhanced password cracking success.Recently adversary academy was on an internal penetration testing engagement. Internally we typically run things like responder to see what…
Chris Hernandez·May 13, 2024This Cloud is on Fire! Microsoft Azure Site Recovery EoPDiscovering and Exploiting CVE-2024–21364
Chris Hernandez·Sep 27, 2023Clocking into The Network — Attacking KronosTimeclock DevicesOne of the services I’m most excited about at Adversary Academy is our targeted vulnerability research (TVR) program. The challenge I’ve…
Chris Hernandez·Mar 9, 2023No Mud No Lotus: The art of transforming breaches through security improvementIn Buddhist philosophy I often hear the expression “No Mud, No Lotus” this expression aligns with the Buddhist view that life and existence…A response icon1A response icon1
Chris Hernandez·Feb 17, 2023Confessions of a bug bounty program managerIn my previous article I wrote about my experiences as a top ranked bug bounty hunter. In this article I will write about my experiences on…
Chris Hernandez·Feb 15, 2023Confessions of a top-ranked bug bounty hunterFrom 2016 to 2017 I was very active in the bug bounty space, working almost exclusively with Synack. My first year doing bug bounties I was…
Chris Hernandez·Jan 12, 2022Patch diffing CVE-2022–21907Our security team does an in-depth analysis of critical security vulnerabilities when they are released on patch Tuesday. This patch…
