Meta tags:
description=Here to help organisations of any size, it s all the same, you re all special, and you all need help, I m here. Tactical, Strategic and Random.;

Headings (most frequently used words):

cve, welcome, bitwarden, c2, surface, pro, eop, 2026, 34910, hollow, pentesting, synology, dsm, 2025, 37186, hp, hacklore, ghosted, poll, dancing, age, verification, sunsetting, domains, amature, the, byod, post,

Text of the page (most frequently used words):
the (12), min (12), read (12), 2025 (9), 2026 (8), exploitation (5), user (4), cve (4), support (3), posts (3), contractor (3), mar (3), age (3), #verification (3), for (3), and (3), network (3), via (3), local (3), surface (3), projects (2), linkedin (2), home (2), byod (2), wrong (2), when (2), security (2), privacy (2), what (2), you (2), domain (2), domains (2), poll (2), dancing (2), ghosted (2), one (2), your (2), all (2), that (2), dec (2), hacklore (2), https (2), vulnerability (2), any (2), gain (2), root (2), access (2), 37186 (2), raptor (2), hollow (2), offsec (2), command (2), jun (2), two (2), device (2), bitwarden (2), older, page, feb, problem, options, post, entsec, people, room, decisions, where, made, reduce, citizen, data, amature, longer, need, sunsetting, infosec, aug, critical, view, yougov, obvious, biased, framing, shit, show, sep, coming, haunt, more, check, scanners, vendor, assurance, osint, supply, chain, appsec, rest, good, stuff, get, precursor, lolwifi, random, aruba, vpn, client, linux, contains, privilege, escalation, allows, unprivileged, another, scalp, jan, chaining, three, issues, from, low, privileged, synology, dsm, confidently, using, pentests, testing, pentesting, may, malicious, actor, with, could, exploit, improper, input, validation, found, unifi, devices, execute, injection, github, com, gadievron, 34910, 48581, authorization, failures, microsoft, management, architecture, allow, standard, escalate, authority, system, admin, prerequisites, uac, interaction, bugs, eight, steps, reboot, pro, eop, full, control, channel, through, icons, net, commands, png, metadator, polygots, results, out, dns, traffic, trusted, azure, 2nd, order, sneaks, latest, vertical, cyber, breaches, exposure, mouse, time, screen, language, agent, browser, yes, tor, exit, timezone, asn, isp, location, welcome, john, carroll, menu, toggle, theme,

Text of the page (random words):
the contractor the contractor home posts support linkedin projects toggle theme menu john carroll welcome network ip location isp asn timezone tor exit yes browser agent language screen local time mouse exposure breaches vertical cyber security support latest posts offsec bitwarden c2 a full command and control channel through icons bitwarden net commands in via png metadator polygots results out via dns all traffic to a trusted domain on azure 2nd order sneaks 24 jun 2026 9 min read exploitation surface pro eop cve 2026 48581 two authorization failures in microsoft s surface device management architecture allow a standard user to escalate to nt authority system on any surface device no admin prerequisites no uac no user interaction two bugs eight steps one reboot 20 jun 2026 8 min read exploitation cve 2026 34910 a malicious actor with access to the network could exploit an improper input validation vulnerability found in unifi os devices to execute a command injection https github com gadievron raptor 26 may 2026 1 min read offsec hollow pentesting confidently using ai in your pentests hollow testing 30 mar 2026 4 min read exploitation synology dsm 7 3 2 chaining three issues to gain root from a low privileged user 25 jan 2026 4 min read exploitation cve 2025 37186 hp the hp aruba via vpn client for linux contains a local privilege escalation vulnerability that allows any unprivileged local user to gain root access cve 2025 37186 another scalp for raptor 26 dec 2025 4 min read random hacklore what hacklore get s wrong and the precursor to https lolwifi network 6 dec 2025 12 min read exploitation ghosted ghosted domains coming to haunt you one more check for your scanners vendor assurance osint supply chain appsec and all the rest of that good stuff 19 sep 2025 23 min read privacy poll dancing age verification poll dancing age verification a critical view of yougov s obvious biased framing of the age verification shit show 4 aug 2025 4 min read infosec sunsetting domains what to do when you no longer need a domain 7 mar 2025 3 min read privacy amature the wrong people in the room when the decisions where made to reduce citizen data security 7 mar 2025 5 min read entsec the byod post byod problem options 14 feb 2025 4 min read page 1 of 4 older 2026 the contractor home posts support linkedin projects