Cyber Resilience Research Labs

Cybersecurity Research

The latest cyber research from Pentera Labs

Threat Research

Living off the Land

LOLBins Against the Machine: Reverse Engineering at Machine Speed

Active Directory

You’ll Never SID’em Coming: DoS in Active Directory

Detection Evasion

Reflective Loading with Remote Memory Interactions

Attack Deep Dive

WebLogic

WebLogic – A Road to Post Exploitation

DNS

Bypassing “Air-Gapped” Networks via DNS

WebLogic

Not Another WebLogic Exploitation: The Road to Post Exploitation

Vulnerability Research

Kubernetes

Beyond IngressNightmare: Uncovering New Injection Vectors in Kubernetes Ingress-NGINX

Fortinet VPN

Piping Hot Fortinet Vulnerabilities – Zero-Days in FortiClient VPN

MSSQL

The Gateway to Control: Initiating Attacks on MSSQL Databases

Cloud Risks

AWS

Blurring Boundaries: Risks of AWS SSM in Hybrid Landscapes

In The Wild

When the Lab Door Stays Open: Exposed Training Apps Exploited for Fortune 500 Cloud Breaches

AWS SSM

Cloud Risks

Looks Legit, Runs Malicious: The Quiet Trust Gap in AWS SSM

Threat Research

Thinking Outside of the (In)Box: Getting Gmail’s ‘Stamp of Approval’ on Malicious Payloads

Vulnerability Research

Podman’s WebView Turned World-View
[CVE-2026-34045]

Security Research Areas

Areas of activity

Ransomware & Cryptominers

Web
Applications

Threat
Intelligence

Enterprise Environments

Post
Exploitations

Cloud

Password
Cracking

Development Processes

EDR
Evasion

Phishing

Kubernetes

Containers

Virtualization

Network
Protocols

Vulnerability Exploitation

Windows / Linux / MacOS TTPs

LLM

API

Network
Gear

Attack
Enablement

Research & Product Innovation

Research-driven exposure validation

The research we conduct directly powers the validation engine you rely on. Our focus goes beyond tracking CVEs, examining the techniques attackers use to bypass security controls, exploit misconfigurations, chain exposures, live off the land, and more. Every discovery feeds into Pentera’s testing capabilities, ensuring they reflect how adversaries actually operate. As attack methods change, Pentera’s testing changes with them through a continuous cycle of research, development, testing, deployment, and refinement.

Pentera Labs Researchers

Offensive expertise, built in

Pentera Labs brings together over 50 world-class adversarial researchers, red teamers, and offensive security specialists as the engine behind the Pentera Platform. The team analyzes how attackers exploit, escalate, and move across enterprise environments, continuously translating their findings into built-in product capabilities.