Lares

Empowering Organizations to Maximize Their Security Potential
  • Lares Labs
  • No Comments

Pentesting 101 – Part 2: The Pre-Req’s of Scoping a Penetration Test Engagement
Pentesting 101 – Part 2: The Pre-Req’s of Scoping a Penetration Test Engagement 445 303 Lares Labs
Ready to plan your next security assessment? In Part 2 of our Pentesting 101 series, we explore the prerequisites of scoping a penetration test. Learn how to involve the right stakeholders, prioritize critical assets to maximize your budget, and outline the exact technical boundaries needed to ensure a comprehensive and effective engagement. read more
  • Lares Labs
  • No Comments

Pentesting 101 – Part 1: So, you need or want a Pentest
Pentesting 101 – Part 1: So, you need or want a Pentest 615 584 Lares Labs
Unsure where to start with penetration testing? Our Pentesting 101 guide breaks down what penetration testing actually is, the differences between vulnerability scanning and pentesting, and the various types of assessments available to help you find the right fit for your organization. read more
  • Lares Labs
  • No Comments

Advanced Techniques of Infiltrating Fortune 100 Companies
Advanced Techniques of Infiltrating Fortune 100 Companies 1200 630 Lares Labs
In the high-stakes world of enterprise cybersecurity, even the most fortified defenses can be breached. This whitepaper provides a technical deep dive into the advanced methodologies—including OSINT, MFA fatigue, and lateral movement—used by Lares adversarial engineers to test and harden Fortune 100 security postures against sophisticated real-world threats. read more
  • Raúl Redondo
  • No Comments

The Phantom Menace: Exposing hidden risks through ACLs in Active Directory
The Phantom Menace: Exposing hidden risks through ACLs in Active Directory 1920 1080 Raúl Redondo
Discover how attackers exploit hidden risks in Active Directory ACLs. Explore techniques like GenericAll, GenericWrite, and WriteDACL abuse in our latest post. read more
  • Raúl Redondo
  • No Comments

Kerberos IV – Delegations
Kerberos IV – Delegations 1920 1080 Raúl Redondo
Discover how to abuse Kerberos for lateral movement. Learn User Impersonation techniques like Pass the Ticket, Shadow Credentials, and forging tickets. read more
  • Raúl Redondo
  • No Comments

Kerberos III – User Impersonation
Kerberos III – User Impersonation 1920 1080 Raúl Redondo
Discover how to abuse Kerberos for lateral movement. Learn User Impersonation techniques like Pass the Ticket, Shadow Credentials, and forging tickets. read more
  • Raúl Redondo
  • No Comments

Kerberos II – Credential Access
Kerberos II – Credential Access 1920 1080 Raúl Redondo
Dive into the fundamentals of the Kerberos authentication protocol. Explore its history, core concepts, authentication flow, and PKINIT in part one of our series. read more
  • Raúl Redondo
  • No Comments

Kerberos I – Overview
Kerberos I – Overview 1920 1080 Raúl Redondo
Dive into the fundamentals of the Kerberos authentication protocol. Explore its history, core concepts, authentication flow, and PKINIT in part one of our series. read more
  • Lares Labs
  • No Comments

Outlook 365 for the PWN
Outlook 365 for the PWN 1200 630 Lares Labs
Outlook 365 for the PWN shows how an attacker can chain built in tools like PowerShell, Word macros, and Outlook COM automation to quietly enumerate domain users and exfiltrate data over email, then closes with practical macro hardening steps in GPO and Endpoint Manager to help defenders get ahead of this tradecraft. read more
  • Lares Labs
  • No Comments

Living Off The Land – Built-In Pwning
Living Off The Land – Built-In Pwning 1200 630 Lares Labs
Living Off The Land – Built-In Pwning walks through how adversaries can use native Windows capabilities like PowerShell Get-CimInstance and ADSI Searcher to quietly enumerate domain groups, users, passwords in description fields, and remote administration paths such as WinRM and SMB, all without dropping additional tooling on disk. read more

Where There is Unity, There is Victory

[Ubi concordia, ibi victoria]

– Publius Syrus

Contact Lares Consulting logo (image)

Continuous defensive improvement through adversarial simulation and collaboration.

Call Us

(720) 600-0329

Email Us

sales@lares.com

©2025 Lares, a Damovo Company | All rights reserved.
Enter your
text here