Blog

Research

Technique breakdowns and what we find in real engagements.

Jan 21, 2026

PRT Tokens: From Initial Access to Long-Term Cloud Control

Primary Refresh Tokens (PRTs) sit at the core of Azure AD authentication, quietly enabling seamless access across cloud and hybrid environments. While commonly treated as an implementation detail, PRTs represent a powerful attack ...

Read article

3 min read

Aug 20, 2025

Hijacking Azure PowerShell Authentication Flow

While looking into some interesting Azure attacks I came upon something interesting when using the Connect-AzAccount Connect-AzAccount......

Read article

4 min read

Jul 23, 2025

A Day Phishing

Scripting Interpreters Interpreters are a great method to achieve command or shellcode execution Are not Native to Windows Not always......

Read article