Compass Security Blog
Offensive Defense
Home
Archive
Contact
Newsletter
Home
Archive
Contact
Newsletter
Recent Posts
Common Entra ID Security Assessment Findings – Part 1: Foreign Enterprise Applications With Privileged API Permissions
From Enumeration to Findings: The Security Findings Report in EntraFalcon
WinGet Desired State: Initial Access Established
From Folder Deletion to Admin: Lenovo Vantage (CVE‑2025‑13154)
Continuous Learning – Inside our Internal Security Training
Categories
Categories
Select Category
APT (9)
Authentication (18)
Bug Bounty (6)
Entra ID (5)
Evasion (4)
Event (34)
Exploiting (20)
Forensic (25)
Hacking-Lab (18)
Hardening (33)
Incident Response (14)
Industrial Control Systems (14)
Information Leakage (7)
Internet of Things (15)
Job (2)
Linux (8)
Log Management (6)
Machine Learning (3)
Malware Detection (6)
Mobile (10)
Networking (17)
OS X (1)
Patch (6)
Penetration Test (63)
Red Teaming (16)
Research (75)
Reversing (13)
Risk Assessment (10)
Scam (1)
Social Engineering (1)
Standards (11)
SuisseID (1)
Talk (22)
Tools (31)
Training (20)
Uncategorized (19)
Vulnerability (47)
Web Application (52)
Web Server (13)
Windows (33)
Wireless (6)
Write-up (26)
Youtube (1)
Tags
Active Directory
Advisory
Application Security
ASFWS
ASP.NET
Azure
Black Hat
bloodhound
Burp
Burp Extension
Bypass
cloud
Conference
CTF
CVE
Defcon
DFIR
Exchange
Hardening
https
Insomni'hack
less
Linux
Logging
Microsoft
ntlm
phishing
PoC
PowerShell
Privilege Escalation
Pwn2Own
relay
Research
SAML
SAML Raider
Security
Social Engineering
sudo
sudoers
TLS
Vulnerability
web
Web Security
XSS
XXE
© 2026
Compass Security Blog
Up ↑