SYSNETSHIELD

// BLOG

Blog about offensive security: write-ups from pentests, red teaming, and phishing

Vulnerability write-ups, paths to Domain Admin in Active Directory, and the phishing techniques that are getting past filters right now. The whole team writes the articles, and each one carries its author’s name. No scare tactics. On top of that, our Red Team Lead Patrik Žák publishes the Security Sunday newsletter every Sunday, plus videos on YouTube.

Regulation has its own category on the blog, but the overview of regimes, deadlines, and security measures lives outside it, on a separate page. It changes, it carries a last-updated date, and an article archive is a poor place to keep track of that.

FeaturedRed team

Red teaming vs. penetration testing: when to choose which

A pentest looks for vulnerabilities, a red team checks whether anyone catches them. A comparison table and one clear rule for choosing by the maturity of your defense.

Phishing

QR phishing and OAuth abuse: what we see in campaigns right now

QR phishing and consent phishing over OAuth get past antispam and MFA alike. What they look like, why they slip through filters, and what actually works against them.

Red team

Five paths to Domain Admin that still work

Kerberoasting, AS-REP roasting, NTLM relay, AD CS ESC1, and passwords in SYSVOL. Five real paths to Domain Admin, each with the remediation that closes it.

Pentest

Preparing for a penetration test: what to get ready and what to hand the tester

Before the pentester starts, they need access, accounts, and a defined scope. A practical checklist of what to hand over so the test doesn’t stall at the start.

Pentest

How often to run a penetration test: by risk, not just by law

A yearly test is the baseline, but risk and the pace of change set the cadence, not the calendar. When to test outside the cycle and what pushes the frequency up.

Regulation

DORA and TLPT: what the financial sector has to test

DORA introduces threat-led penetration testing (TLPT) for the financial sector. Who it applies to, how often the testing runs, and what TLPT involves.

Red team

A ransomware attack on a company: how it runs and how to spot it earlier

Ransomware doesn’t come out of nowhere. The chain from first access through movement across the network to escalation in Active Directory, and where testing catches it earlier.

Phishing

BEC and CEO fraud: how companies lose money to a fraudulent invoice

The attacker poses as a director or a supplier and has a payment sent. How BEC and CEO fraud work without malware, and what a process puts in their way.

Pentest

How to choose a penetration testing vendor and what to ask

Pentest proposals differ by more than price. Which questions to ask, what to ask to see as a sample, and what to avoid in a proposal.

Pentest

The most common mobile app security mistakes

What we find in mobile apps on tests: unprotected storage, keys in the build, weak transport, and a backend that trusts the client.

Pentest

How to secure corporate Wi-Fi and what fails most often on tests

One password shared by the whole company, guests on the same network as the servers, a rogue access point. Four things that fail on corporate Wi-Fi, and how to close them.

Pentest

Why industrial control systems (OT/ICS) are tested differently from IT

An active scan on a live PLC can stop manufacturing. Why OT and ICS are tested carefully and passively, and how that differs from an ordinary pentest.

Pentest

How we set remediation priority by risk, not by score

A score describes the flaw, not your system. How we turn findings into a remediation priority by exploitability, reachability, and impact on operations, not by tenths of a point.

// NEXT STEP

What we write about here, we also test.

Tell us what you want tested. We’ll get back to you and schedule a call to pin down scope, timing, and price.

Free consultationBrowse services