Compass Security
@compasssecurity
Penetration Testing, Red Teaming, Incident Response, Bug Bounty, Security Training, Cyber Range
Może Ci się spodobać
The leaked LockBit chats give a rare inside look at ransomware ops. Read our blog for an analysis and lessons for defenders: blog.compass-security.com/2025/10/lockbi… #CyberSecurity #Ransomware #LockBit
Excited to be part of #BlackAlps25 Come by our booth. We've got another tricky challenge for you.
🥇GOLD SPONSOR Our deepest gratitude 🙏 to our loyal partner @compasssecurity for joining us for the highly anticipated #BlackAlps25. Meet an impressive 👀team of cybersecurity experts at the booth @sploutchy Detailed PROGRAM in a few days on blackalps.ch/ba-25/
NIS2 means stricter rules and steep fines. Penetration testing is key to proving compliance & improving security, uncovering flaws before attackers do. Our latest blog explains why you need it now: blog.compass-security.com/2025/09/ensuri… #CyberSecurity #NIS2 #Pentesting
The final episode of our Kerberos deep dive is live! RBCD opens new attack paths in Kerberos. Learn how misconfigs enable privilege escalation and how to defend. youtu.be/l97RDnzdrXY?fe… #Kerberos #ActiveDirectory
youtube.com
YouTube
Kerberos Deep Dive Part 6 - Resource-Based Constrained Delegation
Episode 5 of our Kerberos deep dive is live. Constrained delegation isn’t bulletproof. See how attackers exploit it, and how to defend with monitoring & best practices. youtu.be/rnhr02eKU0I?si… #Kerberos #ActiveDirectory
youtube.com
YouTube
Kerberos Deep Dive Part 5 - Constrained Delegation
Episode 4 of our Kerberos deep dive is live. Unconstrained delegation can expose critical credentials. Learn how attackers abuse it. And how to lock down your systems. youtu.be/_6FYZRTJQ-s?fe… #Kerberos #ActiveDirectory
youtube.com
YouTube
Kerberos Deep Dive Part 4 - Unconstrained Delegation
Episode 3 of our Kerberos deep dive is live. AS-REP Roasting abuses accounts without pre-auth. Learn the risks, how attackers exploit it, and how to defend. youtu.be/56BjmyOTN5o?fe… #Kerberos #ActiveDirectory
youtube.com
YouTube
Kerberos Deep Dive Part 3 - AS-REP Roasting
We use James Kettle’s (@albinowax) Burp extension Collaborator Everywhere daily. Now our upgrades are in v2: customizable payloads, storage, visibility. Perfect for OOB bugs like SSRF. Find out more here: blog.compass-security.com/2025/09/collab… #AppSec #BurpSuite #Pentesting
We’re proud to see our colleague Emanuele on stage at #NullconBerlin2025: 📢 Topic: DHCPwned: Owning Cameras One Lease at a Time ⏰Today at 3.20 p.m.
Episode 2 of our Kerberos deep dive is live. Kerberoasting lets attackers steal AD service account credentials. See how it works and how to protect your systems: youtu.be/PhNspeJ0r-4?fe… #Kerberos #ActiveDirectory
youtube.com
YouTube
Kerberos Deep Dive Part 2 - Kerberoasting
Finaler Messetage der #SINDEX2025! Nicht verpassen: Um 11.30 Uhr live auf der Stage in Halle 2.2: Wie die #IEC62443 beim Aufbau und Check von OT-Sicherheit hilft. #OTSecurity #IOTSecurity #ICSsecurity #CyberSecurity
Kerberos powers auth in Windows and hides big security risks. We’re launching a 6-part deep dive: from protocol basics to attacks plus how to stop them. Starts today → blog.compass-security.com/2025/09/taming… → Subscribe to our channel! #Kerberos #ActiveDirectory
Calling all bug hunters! schulNetz by Centerboard AG is now in scope! Help protect over 100k users in schools. Are you ready to make the grade and earn bounties? Program: bugbounty.compass-security.com/bug-bounties/c… #bugbounty
Ready for #NullconBerlin2025! 🚀 We can’t wait to connect with the community. 🙌
It’s not just a lanyard—it’s your gateway to cyber adventure🛡️Sponsored by @compasssecurity It provides penetration testing, red teaming services as well as digital forensics & incident response. Got an idea? Chat with their team at #NullconBerlin2025 👉nullcon.net/berlin-2025/sp…
Passwords are dead, long live passkeys! 🔑 In our latest blog, we go hands-on: real-life setups, plus tips for recovery and avoiding pitfalls. blog.compass-security.com/2025/08/into-t… #Passkeys #CyberSecurity #Authentication
Very proud of you. Congratz to you and the Maple Mallard Magistrates !!!
We won Defcon CTF finals for the 4th time in a row! 🎉 Had a really great time meeting friends and hacking with such a talented team! Thanks to NI for organizing and all the other teams for the fierce competition! 🗝️🦆🍁
Very proud we inspire people with our blogs and research to have 'em move on with vulnerability analysis in relevant products (@Veeam) to earn bounties (3k USD) and help safeguard enterprises😎. NTLM relaying blog.compass-security.com/2023/10/relayi… #research #cybersecurity #BugBounty
I’m a web guy, so I usually don’t work on non-web applications since my mind doesn’t do binary. With the help of my friend for reverse engineering, I managed to uncover some CVEs. It was very challenging for me, hope you like it: blog.voorivex.team/hacking-veeam-…
LLM-based vuln hunting just leveled up with xvulnhuntr - a fork of vulnhuntr with support for: C#, Java, Go. Read @rationalpsyche's blog post and go grab the project on GitHub. blog.compass-security.com/2025/07/xvulnh…
United States Trendy
- 1. Chiefs 81.9K posts
- 2. Brian Branch 1,730 posts
- 3. #TNABoundForGlory 40.5K posts
- 4. #LoveCabin N/A
- 5. LaPorta 9,409 posts
- 6. Goff 12.3K posts
- 7. Bryce Miller 3,479 posts
- 8. #OnePride 5,835 posts
- 9. Kelce 13.3K posts
- 10. Butker 7,909 posts
- 11. #DETvsKC 4,133 posts
- 12. #ALCS 9,386 posts
- 13. Baker 50.3K posts
- 14. Gibbs 5,328 posts
- 15. Dan Campbell 2,198 posts
- 16. Collinsworth 2,413 posts
- 17. Patrick Mahomes 6,999 posts
- 18. Pacheco 4,508 posts
- 19. Mike Santana 2,526 posts
- 20. Polanco 6,685 posts
Może Ci się spodobać
-
Interrupt Labs
@InterruptLabs -
Aurélien Chalot
@Defte_ -
scip ag 𝕏
@scipag -
Michael Schneider
@0x6d69636b -
BSides Zurich
@BSidesZurich -
Redguard AG
@redguard_ch -
BlackAlps
@BlackAlpsConf -
Zerocopter
@zerocopter -
Dataflow Security
@dfsec_com -
Invicti Security
@InvictiSecurity -
DawnSecurityLab
@dawnseclab -
DC4131 - DEFCON CH
@defconch -
Corsin Camichel 🌻
@cocaman -
EvilWhale
@EvilWhales
Something went wrong.
Something went wrong.