Penetration Testing

Minnesota Water Attacks and the Predictable Reality

Minnesota Water Attacks and the Predictable Reality 1200 630 Andrew Heller
How possible Iran-linked actors exploited exposed PLCs in the 2026 Minnesota water attacks. MITRE ATT&CK mapping, risk matrix, and OT security lessons from Lares. read more

The Importance of OT Assessments in Critical Infrastructure

The Importance of OT Assessments in Critical Infrastructure 1200 630 Lares Labs
Why testing operational technology (OT) and ICS/SCADA systems is an operational imperative for securing critical infrastructure beyond compliance. read more

Social Profiling – OSINT for Red/Blue

Social Profiling – OSINT for Red/Blue 150 150 Lares Labs

This post will give you an overview of key things to look for from an offensive and defensive perspective to look out for employees, interns, and contractors over sharing information…

read more

Multiple Paths to Compromise An Environment

Multiple Paths to Compromise An Environment 150 150 Lares Labs
Attackers rarely need zero-days. Weak passwords, poor data governance, and flat networks give them multiple paths to compromise your environment. Learn how these weaknesses combine into real attack paths and how to shut them down. read more

Beyond the Scanner: Lares OWASP Top 10 Findings

Beyond the Scanner: Lares OWASP Top 10 Findings 1200 630 Lares Labs
Lares maps real‑world attack paths to the 2025 OWASP Top 10, showing where clean scan dashboards still fail and how AppSec leaders should test beyond the scanner. read more

Pentesting 101 – Part 4: Penetration Test Report & Debrief – The Deliverables

Pentesting 101 – Part 4: Penetration Test Report & Debrief – The Deliverables 1037 671 Lares Labs
What actually happens once your penetration test begins? In Part 3 of our Pentesting 101 series, we walk through the complete penetration testing methodology. Discover the critical steps involved in executing an assessment—from pre-engagement checklists and reconnaissance to attack simulation, exploitation, and the final client debrief—so you know exactly what to expect from your testing partner. read more

Pentesting 101 – Part 3: Executing the Scope-of-Work & Penetration Testing

Pentesting 101 – Part 3: Executing the Scope-of-Work & Penetration Testing 1412 1968 Lares Labs
What actually happens once your penetration test begins? In Part 3 of our Pentesting 101 series, we walk through the complete penetration testing methodology. Discover the critical steps involved in executing an assessment—from pre-engagement checklists and reconnaissance to attack simulation, exploitation, and the final client debrief—so you know exactly what to expect from your testing partner. read more

Pentesting 101 – Part 2: The Pre-Req’s of Scoping a Penetration Test Engagement

Pentesting 101 – Part 2: The Pre-Req’s of Scoping a Penetration Test Engagement 445 303 Lares Labs
Ready to plan your next security assessment? In Part 2 of our Pentesting 101 series, we explore the prerequisites of scoping a penetration test. Learn how to involve the right stakeholders, prioritize critical assets to maximize your budget, and outline the exact technical boundaries needed to ensure a comprehensive and effective engagement. read more

Pentesting 101 – Part 1: So, you need or want a Pentest

Pentesting 101 – Part 1: So, you need or want a Pentest 615 584 Lares Labs
Unsure where to start with penetration testing? Our Pentesting 101 guide breaks down what penetration testing actually is, the differences between vulnerability scanning and pentesting, and the various types of assessments available to help you find the right fit for your organization. read more

Advanced Techniques of Infiltrating Fortune 100 Companies

Advanced Techniques of Infiltrating Fortune 100 Companies 1200 630 Lares Labs
In the high-stakes world of enterprise cybersecurity, even the most fortified defenses can be breached. This whitepaper provides a technical deep dive into the advanced methodologies—including OSINT, MFA fatigue, and lateral movement—used by Lares adversarial engineers to test and harden Fortune 100 security postures against sophisticated real-world threats. read more

Where There is Unity, There is Victory

[Ubi concordia, ibi victoria]

– Publius Syrus

Contact Lares Consulting logo (image)

Continuous defensive improvement through adversarial simulation and collaboration.

Email Us

©2025 Lares, a Damovo Company | All rights reserved.