Read the codebefore the pitch.
Client work stays under NDA, so this is where we publish instead: advisories we have disclosed, tooling we maintain, and write-ups of problems worth explaining.
Certificate of Compromise
A systematization-of-knowledge whitepaper on offensive operations against Active Directory Certificate Services (ADCS) — covering the full attack taxonomy ESC1–ESC18, THEFT1–THEFT5, and the PERSIST/DPERSIST persistence families, alongside the KB5014754 enforcement landscape.
Forged Trust: Offensive Operations against ADCS
The definitive offensive reference for Active Directory Certificate Services. Forged Trust documents the complete ADCS attack taxonomy from first principles — ESC1–ESC18, THEFT1–THEFT5, PERSIST1–PERSIST3, and DPERSIST1–DPERSIST3 — each technique covered end to end alongside the KB5014754 enforcement landscape.
Nothing published in that category yet.
Everything listed here is our own work — we would rather show a short index than fill it with reposted news.
Our distribution,fully auditable.
Berserk Arch is our open security-focused Linux distribution — the clearest sample of how we think about hardening a system end to end.
Found somethingin our systems?
We acknowledge reports within one business day and credit researchers publicly unless asked not to. No legal action against good-faith research.