- Penetration Testing
Pentesting as a Service
- Find, validate, and fix vulnerabilities on your web, mobile, and thick applications.Find, validate, and fix vulnerabilities on your AWS, Azure, Google, and Oracle cloud infrastructures.
- Find, validate, and fix vulnerabilities on your internal, external, wireless, and host-based networks.Build a mature security program with AppSec as a Service, program assessments, and threat modeling.
- Perform red and purple team, assumed breach, ransomware, and detective control assessments.Find application security vulnerabilities earlier in your SDLC with SAST, SCR, triaging, and remediation validation.
- Resources
- Read the latest business insights from our thought leaders.Infographics, ebooks, checklists, and more.
- Vulnerability and testing insights from our technical experts.Hear from leaders in the industry.
- Security tools for everyone.Learn from NetSPI’s technical and business experts.
- Your resource for SQL Injection vulnerabilities.
-
Jake Karnes
Jake has a B.S. in Computer Science from San Jose State University, and holds the GIAC Certified Incident Handler and Certified Ethical Hacker certifications. He specializes in web application penetration testing. Jake also contributes to the development of applications and tools for the NetSPI penetration testing team.
December 8th, 2020
CVE-2020-17049: Kerberos Bronze Bit Attack – Practical Exploitation
This post reviews how the Kerberos Bronze Bit vulnerability (CVE-2020-17049) can be exploited in practice. I strongly suggest first reading the Bronze Bit Attack in Theory post to understand why and how this attacks works. It is also worth noting that Microsoft published a patch for the vulnerability on November 10, 2020. The patch rollout […]
December 8th, 2020
CVE-2020-17049: Kerberos Bronze Bit Attack – Theory
Introduction and Background This attack expands upon the excellent research documented by Elad Shamir in “Wagging the Dog: Abusing Resource-Based Constrained Delegation to Attack Active Directory.” I’ll cover the key points below, but his article a great resource and primer for Kerberos and constrained delegation in AD. If you’re already familiar with the Kerberos fundamentals, […]
December 8th, 2020
CVE-2020-17049: Kerberos Bronze Bit Attack – Overview
With the release of Microsoft’s patch to fix CVE-2020-17049, I’m excited to share details about this vulnerability and how it could be exploited. This post is only a very high-level overview, and I strongly encourage readers who are interested to check out my follow-up posts which provide much more depth: To learn about Kerberos, Kerberos […]
March 30th, 2020
Decrypting Azure VM Extension Settings with Get-AzureVMExtensionSettings
TL;DR If you’re a local admin on an Azure VM, run the Get-AzureVMExtensionSettings script from MicroBurst to decrypt VM extension settings and potentially view sensitive parameters, storage account keys and local Administrator username and password. Overview The Azure infrastructure needs a mechanism to communicate with and control virtual machines. All Azure Marketplace images have the […]
February 13th, 2020
Attacking Azure with Custom Script Extensions
PowerShell and Bash scripts are excellent tools for automating simple or repetitive tasks. Azure values this and provides several mechanisms for remotely running scripts and commands in virtual machines (VMs). While there are many practical, safe uses of these Azure features, they can also be used maliciously. In this post we’ll explore how the Custom […]
Need a Quote?
Common Questions
What is Penetration Testing as a Service (PTaaS)?
PTaaS is NetSPI’s delivery model for penetration testing. It enables customers to simplify the scoping of new engagements, view their testing results in real time, orchestrate faster remediation, perform always-on continuous testing, and more - all through the Resolve™ vulnerability management and orchestration platform.
Learn More 
Why should I use NetSPI?
Your attack surface is constantly evolving. We help organizations defend against real-world attacks by being the best at simulating real-world, sophisticated adversaries with the products, services, and training we provide. Our historical testing data shows that there is simply no replacement for human-led manual deep dive testing. This level of testing finds the most severe vulnerabilities that tools will never uncover. Our proven methodology ensures that the client experience and our findings aren’t only as good as the latest tester assigned to your project. That consistency gives our customers assurance that if vulnerabilities exist, we will find them. In addition, our Resolve platform delivers automation to ensure our people spend time looking for the vulnerabilities that tools miss. We provide automated and manual testing of all aspects of an organization’s entire attack surface, including external and internal network, application, cloud, and physical security. We know how attackers think and operate, allowing us to help our customers better defend against the threats they face daily.