
Technical
Code, tools, and techniques, no fluff. In-depth technical write-ups from CovertSwarm’s offensive security team, covering exploitation, tooling, research, and the detail behind real-world attacks.

When the API Lies – How RAID Discovered a Critical Privilege Escalation by Reading JavaScript
Read MoreWhen the API Lies – How RAID Discovered a Critical Privilege Escalation by Reading JavaScriptHow RAID found unauthenticated customer data in a retail GraphQL API
Read MoreHow RAID found unauthenticated customer data in a retail GraphQL API
When “Just Logging In” Isn’t Just Logging In: A look at xrdp and CVE-2026-33145
Read MoreWhen “Just Logging In” Isn’t Just Logging In: A look at xrdp and CVE-2026-33145CVE-2026-33727 – When “Low Privilege” Isn’t Low Enough: A Pi-hole LPE Story
Read MoreCVE-2026-33727 – When “Low Privilege” Isn’t Low Enough: A Pi-hole LPE Story
Why So Syscalls? BOF Edition
Read MoreWhy So Syscalls? BOF Edition
Cobalt Strike External C2 Passthrough Guide
Read MoreCobalt Strike External C2 Passthrough Guide
K8s – Pod to Node Escape Techniques
Read MoreK8s – Pod to Node Escape Techniques
Exploiting CVE-2023-5043 and CVE-2023-5044 to overtake a Kubernetes Cluster
Read MoreExploiting CVE-2023-5043 and CVE-2023-5044 to overtake a Kubernetes Cluster