Eric Gonzales Eric Gonzales

The Ghost City: Why Orphaned Subdomains Are Your Best Entry Point

Are you relying solely on client-provided Swagger documentation while missing the undocumented "Shadow APIs" hiding on orphaned subdomains that bypass standard WAF defenses? This analysis unveils the "Ghost City" of legacy infrastructure, demonstrating how to automate the discovery of these forgotten endpoints to secure high-impact, unauthenticated access.

Read More
Threat NG Staff Threat NG Staff

The Boardroom Backdoor: Why Your Red Team Needs Financial OSINT

Do you know exactly which "Material Weaknesses" your client has legally confessed to the SEC, and how to map those admissions directly to exposed technical infrastructure? This analysis explores the "Boardroom Backdoor" of Financial OSINT, demonstrating how to automate the correlation of regulatory filings with external vulnerabilities to prove negligence and secure executive impact.

Read More
Threat NG Staff Threat NG Staff

The Glass Hotel: Why Mobile Apps and Personal Repos Are Your Client’s Biggest Blind Spot

While you exhaust billable hours bypassing the WAF, have you considered that the "Master Key" to the infrastructure might already be exposed in a developer's personal GitHub repo or a compiled mobile app? This analysis explores the "Glass Hotel" of Non-Human Identity (NHI) leaks and demonstrates how to automate the discovery of these off-scope vulnerabilities to secure "Initial Access" immediately.

Read More