Technical Blog

Learn from our experienced security professionals through technical how-to guides, disclosures, and more. 

Read our most recent blog posts, articles, case studies, news, announcements, and more from our Cyber Advisors business blog.

    Cyber advisors found a misconfiguration that allowed us to use a CORS attack to steal session tokens directly. Learn about this CORS example here!

    Sep 5, 2024 8:59:58 PM | application penetration testing Fun With CORS

    Cyber Advisors found a misconfiguration that allowed us to u...

    Cyber Advisors lockpicking guide & AMA on wafer locks! Continue to learn how to master lock picking with our wafer lock part 2 blog & a little practice.

    Nov 28, 2023 5:41:33 AM | AMA Lockpicking: Wafer Lock, AMA – Part 2

    Cyber Advisors lockpicking guide & AMA on wafer locks! C...

    Offensive Cyber Security Technical Blog listing page

    Nov 2, 2023 4:43:31 AM | Microsoft Flying Under The Radar: Bypassing Microsoft Defender For Identity Detections

    Talis Ozols' guide shows several methods for bypassing Micro...

    White Oak Security uses Ligolo-ng to get a network pivot point that can relay reverse shells & file transfer requests to get tools to the target remote system.

    Oct 4, 2023 10:57:00 PM | VPN Pivoting VPN Process Tunneling: Ligolo-ng

    Cyber Advisors uses Ligolo-ng to get a network pivot point t...

    Learn the basics of lockpicking, legal aspects of owning/using tools in the US, & what you need to start cracking open your first lock with White Oak Security!/Cyber Advisors

    Oct 4, 2023 5:10:42 AM | AMA Lockpicking: Legal Whims & Tumbling Pins – AMA Part 1

    Learn the basics of lockpicking, legal aspects of owning/usi...

    Offensive Cyber Security Technical Blog listing page

    Sep 30, 2023 12:00:00 AM | cyber security events White Oak Security Is Now Cyber Advisors!

    White Oak Security is now Cyber Advisors! Now we have experi...

    Talis (formerly White Oak Security now Cyber Advisors) demonstrates the tools & the how to guide on both attacks & defenses regarding dumping LSASS without Mimikatz.

    Aug 18, 2023 3:30:00 PM | LSASS Attacks & Defenses: Dumping LSASS With No Mimikatz

    Talis (formerly White Oak Security) demonstrates the tools &...

    Learn about methods & techniques attackers use to bypass LSA Protection & dump credentials from memory, like PPLs, through Bryan's part 2 blog.

    Aug 8, 2023 9:02:01 AM | Adversarial Simulation Credential Dumping Protections: Part 2 - Bypass LSA Protection

    Learn about methods & techniques attackers use to bypass...

    Windows Credential Dumping Protections blog part 1 by Bryan Valarezo shines light on LSA Protection, including how to implement it (2 ways) with mimikatz. at Cyber advisors

    Jul 11, 2023 10:20:14 AM | Adversarial Simulation Credential Dumping Protections: Part 1 - LSA Protection

    Windows Credential Dumping Protections blog part 1 by Bryan ...

    Offensive Cyber Security Technical Blog listing page

    Jun 30, 2023 3:12:19 AM | Adversarial Simulation Hashcat Quick Guide Techniques & Tips

    Hashcat guide by Joshua Platz on targeted password cracking ...

    White Oak Security pentester shares a mobile application penetration testing tool called APKLeaks that scans APK files for URIs, endpoints, and secrets.

    Apr 27, 2023 4:09:25 AM | application penetration testing APKLeaks: Discover Leaks Within APK Files

    Cyber Advisors pentester shares a mobile application penetra...

    Cyber advisors discusses the security of the LoRa frequency, including common threats, approaches, & tools that ethical hackers (pentesters) use to test. by white oak security

    Mar 16, 2023 7:33:32 AM | Adversarial Simulation LoRa Frequency & Penetration Testing

    White Oak Security discusses the security of the LoRa freque...

    Expert White Oak Security penetration tester, Brett DeWall, demonstrates how to pick a tubular lock in this cyber security blog (which includes a video too!).

    Jan 12, 2023 5:11:59 AM | how to lock pick How To Pick A Tubular Lock

    Expert Cyber Advisor penetration tester, Brett DeWall, demon...

    Read a real-world example of a misconfigured Oracle database that allowed White Oak Security/cyber advisors to completely take over the database, all through the use of ODAT.

    Jan 4, 2023 10:12:11 AM | cracking password Exploiting Oracle Databases With ODAT

    Read a real-world example of a misconfigured Oracle database...

    Offensive Cyber Security Technical Blog listing page

    Dec 15, 2022 6:38:58 AM | Adversarial Simulation Account Operators Privilege Escalation

    This Account Operators Privilege Escalation how-to blog by T...

    Part 6 of the Screenshot Tool series compares the top 5 HTTP screenshot tools to figure out which tool is best? Cyber Advisors/White Oak Security does the work for you! More..

    Aug 4, 2022 8:44:00 AM | best screenshot tool Screenshot Tool: Part 6 – Which Tool Is Best?

    Part 6 of the Screenshot Tool series compares the top 5 HTTP...

    Aquatone is the featured penetration testing tool for part 5 of White Oak Security’s/cyber advisors Screenshot Tool blog series, next we will compare all 5 of these tools.

    Jul 28, 2022 6:31:38 AM | best screenshot tool Screenshot Tool: Part 5 – Aquatone

    Aquatone is the featured penetration testing tool for part 5...

    Part 4 of the screenshot tool series covers the features within the Gowitness tool, how easy it is to use, & any problems that occur while performing scans. cyber advisors white oak security

    Jul 21, 2022 12:38:00 AM | golang Screenshot Tool: Part 4 – Gowitness

    Part 4 of the screenshot tool series covers the features wit...

    Welcome back pentesters & bug bounty hunters to White Oak Security’s/cyber advisors screenshot tool series! Part 3 shines light on the Snapback tool.

    Jul 14, 2022 6:22:02 AM | best screenshot tool Screenshot Tool: Part 3 – Snapback

    Welcome back pentesters & bug bounty hunters to our cybe...

    In reviewing the top HTTP screenshot tool series, Cyber Advisors presents part 2 on how to use the WitnessMe tool as a pentester or bug bounty hunter.

    Jun 30, 2022 1:55:00 AM | best screenshot tool Screenshot Tool: Part 2 – WitnessMe

    In reviewing the top HTTP screenshot tool series, Cyber Advi...

    White Oak Security/Cyber Advisors reviews the top HTTP screenshot tools that are currently available for pentesters or bug bounty hunters, part 1 starts with EyeWitness.

    Jun 23, 2022 3:27:07 AM | EyeWitness Screenshot Tool: Part 1 – EyeWitness

    Cyber Advisors reviews the top HTTP screenshot tools that ar...

    Part 4 of Brett DeWall's Bypassing Doors shares how to bypass REX sensors (Request to Exit sensor) with a can of compressed air - your keyboard duster!

    May 19, 2022 4:36:33 AM | Bypassing Doors Bypassing Doors – Part 4: Compressed Air

    Part 4 of Brett DeWall's Bypassing Doors shares how to bypas...

    Cyber Advisors part 3 of the Bypassing Doors series shows how our experts bypass REX sensors (Request to Exit sensor) with only A PIECE OF PAPER.

    May 12, 2022 7:18:48 AM | Bypassing Doors Bypassing Doors – Part 3: REX Sensor

    Cyber Advisors, Brett's part 3 of the Bypassing Doors series...

    Part 2 of Cyber Advisors, Brett DeWall's Bypassing Doors series, we demonstrate the Double Door Tool or the DDT. Watch experts quickly bypass locked doors without access.

    May 5, 2022 6:15:27 AM | Bypassing Doors Bypassing Doors – Part 2: DDT

    Part 2 of Cyber Advisors Bypassing Doors series, we demonstr...

    Wonder how our pentesters open doors without the keys or access? In this part 1 of Bypassing Doors series by white oak security / cyber advisors, we demonstrate the Under The Door Tool (UTDT).

    Apr 28, 2022 6:39:25 AM | Bypassing Doors Bypassing Doors – Part 1: UTDT

    Wonder how our pentesters open doors without the keys or acc...

    In this part 2 post of the Gophish Setup series, White Oak Security will be configuring Gophish with a mail server by utilizing Gandi, a domain name registrar.

    Apr 6, 2022 5:24:56 AM | gophish Gophish Setup: Gandi – Part 2

    In this part 2 post of the Gophish Setup series, Cyber Advis...

    Pentesters at White Oak Security share how to modify compiled Java executables by editing bytecode, which allows you to make applications behave differently.

    Feb 17, 2022 2:02:00 AM | editing bytecode Modifying Java By Editing Bytecode

    Pentesters at Cyber Advisors share how to modify compiled Ja...

    This post by cyber advisors dives into the functionality & usage of the tool, Gophish, used to deploy phishing engagements or awareness training exercises.

    Jan 5, 2022 3:23:56 AM | gophish Gophish Setup – Part 1

    This post by cyber advisors dives into the functionality &am...

    Cyber Advisors highlights how we bypassed the EDR solution Symantec Endpoint Protection, enabling known malicious tools without detection or prevention. from white oak security

    Sep 23, 2021 5:54:09 AM | Adversarial Simulation Bypassing Defenses: Symantec Endpoint Protection

    Cyber Advisors highlights how we bypassed the EDR solution S...

    MORE FROM OUR TECHNICAL BLOG Cyber Advisors specializes in providing fully customizable cyber security solutions & services. Our knowledgeable, highly skilled, talented security experts are here to help design, deliver, implement, manage, monitor, put your defenses to the test, & strengthen your systems - so you don’t have to. Read more from our technical experts...

    Jul 15, 2021 5:09:08 AM | application security Installation & Use Of TestSSL.sh Tool

    Discover how to use, configure, & install one of Cyber A...

    Brett DeWall (one of our pentesters) is back at it again, with White Oak Security's new blog - a guide on how to root a Google Pixel 4a Smartphone. Learn how...

    Jun 9, 2021 7:09:00 AM | android pentesting How To Root A Google Pixel 4a

    Brett DeWall (one of our pentesters) is back at it again, wi...

    Offensive Cyber Security Technical Blog listing page

    May 18, 2021 4:18:48 AM | pentesting test lab Building A Test Lab For Pentesting

    Wondering how to get started in pentesting? By building a te...

    Brett DeWall (Cyber Advisors pentester from white oak security) shows why passwords suck, the password cracking rig to get you in!

    May 2, 2019 2:32:00 PM | cracking password Password Cracking Rig

    Brett DeWall (Cyber Advisors pentester from white oak securi...