irabva retweeted
We know it’s been a while since our last post.
But we’re back, with great news!
We’re launching our blog, “Purpleshift,” featuring interesting articles, talks, and research for both blue and red teams.
Yeah that’s why it’s purple :)
purpleshift.io/
irabva retweeted
AD trust relationships can quietly hand over your whole forest, no Domain Admin in the target domain needed.
Misconfigured SID filtering lets attackers escalate across trusts straight to Enterprise Admin.
Full breakdown with @irabva:
purpleshift.io/articles/2026…
irabva retweeted
What if a host is vulnerable to NTLM Reflection but NOT domain-joined?
Spoiler: you can still get SYSTEM under the right conditions.
Read @irabva full breakdown:
purpleshift.io/purple/2026-0…
irabva retweeted
In this blog post, we continue our story about discovering a misconfigured Kubernetes cluster during a pentest engagement conducted by our colleague @irabva , which eventually led to access to internal source code repositories.
purpleshift.io/purple/2026-0…
irabva retweeted
Gained initial access to a company network… but what next?
In this real pentest project our colleague @irabva shows how Kubernetes misconfigurations led to full cluster access and exposed S3 data.
If you work with K8s, read this
purpleshift.io/purple/2026-0…