---
title: Research and Insights | Andrei Herasimau
description: As a penetration tester, Andrei explores our customers' systems and checks them for vulnerabilities. During his studies at ETH Zurich, he was able to gain knowledge about secure software development, which he now uses in practice.
---

[![avantguard](https://avantguard.io/hs-fs/hubfs/LogoInverted.png?width=254&height=120&name=LogoInverted.png "avantguard")](https://avantguard.io?hsLang=en)

- [Services](https://avantguard.io/en/services)
- [About Us](https://avantguard.io/en/über-uns)
- [Experience](https://avantguard.io/en/erfahrung)
- [Career](https://avantguard.io/de/karriere)
- [Research](https://avantguard.io/en/blog)
- [Contact](https://avantguard.io/en/kontakt)

 En

- [English](https://avantguard.io/en/blog/author/andrei-herasimau)
- [German](https://avantguard.io/blog/author/andrei-herasimau)

[![avantguard](https://avantguard.io/hs-fs/hubfs/LogoInverted.png?width=144&height=65&name=LogoInverted.png "avantguard")](https://avantguard.io?hsLang=en)

<https://avantguard.io/en/blog/author/andrei-herasimau#dark-header__mobile-nav__mmenu>

[![Dark-logo-small-1](https://www.fthemes.net/hubfs/Dark-logo-small-1.png "Dark-logo-small-1")](https://avantguard.io?hsLang=en)

- [Services](https://avantguard.io/en/services)
- [About Us](https://avantguard.io/en/über-uns)
- [Experience](https://avantguard.io/en/erfahrung)
- [Career](https://avantguard.io/de/karriere)
- [Research](https://avantguard.io/en/blog)
- [Contact](https://avantguard.io/en/kontakt)

 En

- [English](https://avantguard.io/en/blog/author/andrei-herasimau)
- [German](https://avantguard.io/blog/author/andrei-herasimau)

[![avantguard](https://avantguard.io/hs-fs/hubfs/LogoInverted.png?width=144&height=65&name=LogoInverted.png "avantguard")](https://avantguard.io?hsLang=en)

<https://avantguard.io/en/blog/author/andrei-herasimau#dark-header__mobile-nav__mmenu>

- [Services](https://avantguard.io/en/services)
- [About Us](https://avantguard.io/en/über-uns)
- [Experience](https://avantguard.io/en/erfahrung)
- [Career](https://avantguard.io/de/karriere)
- [Research](https://avantguard.io/en/blog)
- [Contact](https://avantguard.io/en/kontakt)

Current language: English

- [English](https://avantguard.io/en/blog/author/andrei-herasimau)
- [German](https://avantguard.io/blog/author/andrei-herasimau)

Filter by tag

All Offensive Red Team Research Covenant Bypass AI Cleartext Credentials Defensive News AD CS Active Directory Conti HTB Keepass PingCastle PowerShell Pro Labs Ransomware Review Shares Snaffler

![](https://avantguard.io/hubfs/AboutUs/C99A8322_blog.png)

### Andrei Herasimau

As a penetration tester, Andrei explores our customers' systems and checks them for vulnerabilities. During his studies at ETH Zurich, he was able to gain knowledge about secure software development, which he now uses in practice.

<https://www.linkedin.com/in/andrei-herasimau-387742140/>

[![BlueHammer and RedSun analysed](https://avantguard.io/hs-fs/hubfs/Blog/BlueHammerRedSun/bluehammer-1.png?width=400&upsize=true&name=bluehammer-1.png)](https://avantguard.io/en/blog/bluehammer-und-redsun-analysiert)

[Offensive](https://avantguard.io/en/blog/tag/offensive) [Red Team](https://avantguard.io/en/blog/tag/red-team) [News](https://avantguard.io/en/blog/tag/news)

##### [BlueHammer and RedSun analysed](https://avantguard.io/en/blog/bluehammer-und-redsun-analysiert)

In the past few months, a security researcher that goes by the name of Chaotic Eclipse has...

21 minute read

[Andrei Herasimau](https://avantguard.io/en/blog/author/andrei-herasimau)

 9 June 2026 

[Read More](https://avantguard.io/en/blog/bluehammer-und-redsun-analysiert)

[![The Sins Of NTLMv1](https://avantguard.io/hs-fs/hubfs/Blog/NTLMv1/rainbow_table_structure.png?width=400&upsize=true&name=rainbow_table_structure.png)](https://avantguard.io/en/blog/die-sünden-von-ntlmv1)

[Offensive](https://avantguard.io/en/blog/tag/offensive) [Red Team](https://avantguard.io/en/blog/tag/red-team)

##### [The Sins Of NTLMv1](https://avantguard.io/en/blog/die-sünden-von-ntlmv1)

In the past year, one particular configuration in our clients' Active Directory (AD) domains has...

11 minute read

[Andrei Herasimau](https://avantguard.io/en/blog/author/andrei-herasimau)

 3 February 2026 

[Read More](https://avantguard.io/en/blog/die-sünden-von-ntlmv1)

[![Penetration Testing For AI Applications](https://avantguard.io/hs-fs/hubfs/Blog/mitre_atlas.png?width=400&upsize=true&name=mitre_atlas.png)](https://avantguard.io/en/blog/penetration-testing-for-ai-applications)

[Research](https://avantguard.io/en/blog/tag/research) [AI](https://avantguard.io/en/blog/tag/ai)

##### [Penetration Testing For AI Applications](https://avantguard.io/en/blog/penetration-testing-for-ai-applications)

LLM solutions are now an integral part of our customers' day-to-day work and are used in various...

10 minute read

[Andrei Herasimau](https://avantguard.io/en/blog/author/andrei-herasimau)

 2 December 2024 

[Read More](https://avantguard.io/en/blog/penetration-testing-for-ai-applications)

##### Menu

- [Home](https://avantguard.io/en/homepage)
- [Services](https://avantguard.io/en/services)
- [About Us](https://avantguard.io/en/über-uns)
- [Experience](https://avantguard.io/en/erfahrung)
- [Research](https://avantguard.io/en/blog)
- [Contact](https://avantguard.io/en/kontakt)

##### Services

- [Basic Health Check](https://avantguard.io/en/basic_health_check)
- [Penetration Testing](https://avantguard.io/en/penetration-test)
- [Red Teaming](https://avantguard.io/en/red-teaming)
- [AD Security Improvement](https://avantguard.io/en/ad_improvement)
- [HIST](https://avantguard.io/en/hist)
- [Other](https://avantguard.io/en/services)

##### Research

- [Cleartext Credentials](https://avantguard.io/en/blog/plaintext-credentials)
- [Overload Mapping](https://avantguard.io/blog/overload-mapping-vs.-memory-scanner)
- [Ransomware](https://avantguard.io/en/blog/what-really-helps-against-ransomware)
- [Red Teaming](https://avantguard.io/en/blog/red-teaming)
- [KeePass](https://avantguard.io/en/blog/attacking-and-hardening-keepass)
- [PowerShell Logging](https://avantguard.io/en/blog/powershell-enhanced-logging-capabilities-bypass)
- [AD CS](https://avantguard.io/en/blog/active-directory-certificate-services)

© 2026 avantguard cyber security AG

##### avantguard cyber security AG

Neue Jonastrasse 52   
8640 Rapperswil-Jona  
Switzerland  
+41 55 253 30 30  
[info@avantguard.io](mailto:info@avantguard.io)

![flagge_schweiz](https://avantguard.io/hs-fs/hubfs/flagge_schweiz.png?width=40&height=40&name=flagge_schweiz.png)

[Privacy Statement](https://avantguard.io/en/datenschutzerkl%C3%A4rung?hsLang=en)

[Follow us on LinkedIn](https://ch.linkedin.com/company/avantguard-cyber-security-ag) [Follow us on Twitter](https://twitter.com/avantguard_io) 

![](https://f.hubspotusercontent00.net/hubfs/7712601/back-to-top.png)