Cyber Security Blog

Blog posts about Cyber Security, Pentesting, Cloud Security and Red Teaming from our team.

Infrastructure Penetration Test

Active Directory Certificate Services (AD CS): Attacks Beyond the Classics (ESC9 Through ESC16)

ESC9 through ESC16 in Active Directory Certificate Services: the escalation techniques that classic ESC1–ESC8 guides leave out, with precondition and hardening.
Jan Kahmen
Jan Kahmen
7 min read
Penetration Test

What Is a Security Advisory?

A security advisory documents a vulnerability with its severity, affected versions and patch. How an advisory is structured and how it comes to be.
Jan Kahmen
Jan Kahmen
6 min read
Penetration Test

The Availability Vector in CVSS

In CVSS, availability is a standalone security objective. How the availability vector works and why a flaw with no data exposure still reaches CVSS 7.5.
Jan Kahmen
Jan Kahmen
6 min read
Penetration Test

What Is a 10 Out of 10? The Perfect CVSS Score

A clean 10.0 in CVSS is rare and follows an exact combination of metrics. What makes the perfect score, and why most findings stall at 9.8.
Jan Kahmen
Jan Kahmen
6 min read
Web/API Penetration Test

Stored XSS and Its Dangers: Anatomy of a Persistent Attack Surface

Stored XSS persists in the backend and fires on every render. The anatomy of the sink, trust context, and privilege escalation of an underrated XSS class.
Jan Kahmen
Jan Kahmen
6 min read
Web/API Penetration Test

CVE-2026-42849: How One Link Can Take Over an Authentik Session

Found during a customer pentest: CVE-2026-42849 lets attackers take over an Authentik session via a crafted link. Finding, impact, and patch.
Jan Kahmen
Jan Kahmen
6 min read