REPORT
The 25x Remediation Gap: See how elite security teams resolve risks in 10 days vs. 249
REPORT
The 25x Remediation Gap: See how elite security teams resolve risks in 10 days vs. 249

GhostShift

Penetration tester with 7+ years of experience in offensive security, having completed over 100 penetration tests across cloud, web, mobile, and internal/external network environments. I hold OSCP, EWPTXv2, and Cloud Essentials certifications and have conducted security assessments for global clients in public and private sectors. I specialize in real-world attack simulations, manual exploitation, and helping organizations understand and mitigate security risks from an attacker's perspective.

ADCS-ESC1: Misconfigured Certificate Templates Leading to Full Domain Compromise

March 12, 2026
Est Read Time: 9 min
Executive Summary Active Directory Certificate Services (ADCS) ESC1 is a critical misconfiguration that allows...
Cobalt Core

Full Account Takeover via AWS Cognito Misconfiguration

February 11, 2026
Est Read Time: 23 min
Executive Summary AWS Cognito is a widely adopted identity management service that handles authentication and...
Cobalt Core