--- title: Research and Insights | Sandro Ackermann description: Sandro combines passion with expertise. He lives and breathes IT security, and checks customer systems for vulnerabilities. Thanks to his varied work in different roles, combined with the successful completion of the CAS Cyber Security, he knows how to effectively uncover the weaknesses of systems and develop targeted security strategies. image: https://avantguard.io/hubfs/raw_assets/public/avantguard/images/og-default.png --- [Skip to content](https://avantguard.io/en/blog/author/sandro-ackermann#main) [![avantguard cyber security](https://avantguard.io/hs-fs/hubfs/LogoInverted.png?width=128&height=61&name=LogoInverted.png)](https://avantguard.io/en/) - [Services](https://avantguard.io/en/services) - [About Us](https://avantguard.io/en/about-us) - [Experience](https://avantguard.io/en/experience) - [Career](https://avantguard.io/en/careers) - [Research](https://avantguard.io/en/blog) - [Contact](https://avantguard.io/en/contact) [DE](https://avantguard.io/blog) EN [Request an offer](https://avantguard.io/en/request-an-offer) [DE](https://avantguard.io/blog) EN [Request an offer](https://avantguard.io/en/request-an-offer) Posts by ![](https://avantguard.io/hs-fs/hubfs/AboutUs/C72342A83.jpeg?width=96&height=96&name=C72342A83.jpeg) # Sandro Ackermann Sandro combines passion with expertise. He lives and breathes IT security, and checks customer systems for vulnerabilities. Thanks to his varied work in different roles, combined with the successful completion of the CAS Cyber Security, he knows how to effectively uncover the weaknesses of systems and develop targeted security strategies. Search the blog Search - [All](https://avantguard.io/en/blog) - [Offensive](https://avantguard.io/en/blog/tag/offensive) - [Red Team](https://avantguard.io/en/blog/tag/red-team) - [Research](https://avantguard.io/en/blog/tag/research) - [Covenant](https://avantguard.io/en/blog/tag/covenant) - [Bypass](https://avantguard.io/en/blog/tag/bypass) - [AI](https://avantguard.io/en/blog/tag/ai) - [Cleartext Credentials](https://avantguard.io/en/blog/tag/cleartext-credentials) - [Defensive](https://avantguard.io/en/blog/tag/defensive) - [News](https://avantguard.io/en/blog/tag/news) - [Review](https://avantguard.io/en/blog/tag/review) - [AD CS](https://avantguard.io/en/blog/tag/ad-cs) - [Active Directory](https://avantguard.io/en/blog/tag/active-directory) - [Conti](https://avantguard.io/en/blog/tag/conti) - [HTB](https://avantguard.io/en/blog/tag/htb) - [Keepass](https://avantguard.io/en/blog/tag/keepass) - [PingCastle](https://avantguard.io/en/blog/tag/pingcastle) - [PowerShell](https://avantguard.io/en/blog/tag/powershell) - [Pro Labs](https://avantguard.io/en/blog/tag/pro-labs) - [Ransomware](https://avantguard.io/en/blog/tag/ransomware) - [Shares](https://avantguard.io/en/blog/tag/shares) - [Snaffler](https://avantguard.io/en/blog/tag/snaffler) [![](https://avantguard.io/hs-fs/hubfs/Blog/SpectrePi/spectrepi-banner.png?width=800&name=spectrepi-banner.png)](https://avantguard.io/en/blog/die-blinde-stelle-von-802.1x-network-access-control-nac) - [Bypass](https://avantguard.io/en/blog/tag/bypass) - [Research](https://avantguard.io/en/blog/tag/research) - [Defensive](https://avantguard.io/en/blog/tag/defensive) ### [The Blind Spot Of 802.1X Network Access Control (NAC)](https://avantguard.io/en/blog/die-blinde-stelle-von-802.1x-network-access-control-nac) Thanks to SpectrePi, a physical device on the network, an attacker can bypass the 802.1X NAC. This attack vector is of particular interest to organisations that operate devices ... [Sandro Ackermann](https://avantguard.io/en/blog/author/sandro-ackermann) August 28, 2026 16 min read [![](https://avantguard.io/hs-fs/hubfs/image-3-png.png?width=800&name=image-3-png.png)](https://avantguard.io/en/blog/erfahrungsbericht-ki-gestützte-bof-entwicklung-im-red-team) - [Offensive](https://avantguard.io/en/blog/tag/offensive) - [AI](https://avantguard.io/en/blog/tag/ai) ### [Experience Report: AI-Assisted BOF Development in Red Teaming](https://avantguard.io/en/blog/erfahrungsbericht-ki-gestützte-bof-entwicklung-im-red-team) This blog post details my experience utilizing artificial intelligence in offensive cybersecurity to port a current LSASS dumping tool into a Beacon Object File (BOF) for use in a ... [Sandro Ackermann](https://avantguard.io/en/blog/author/sandro-ackermann) April 8, 2026 7 min read [![](https://avantguard.io/hs-fs/hubfs/Blog/threadless2/new_plan.png?width=800&name=new_plan.png)](https://avantguard.io/en/blog/threadless-ops-ii-enhanced-evasion) - [Offensive](https://avantguard.io/en/blog/tag/offensive) - [Research](https://avantguard.io/en/blog/tag/research) - [Red Team](https://avantguard.io/en/blog/tag/red-team) ### [Threadless Ops II – Enhanced Evasion](https://avantguard.io/en/blog/threadless-ops-ii-enhanced-evasion) In Threadless Ops II, we combine threadless injection with evasion techniques to bypass EDR heuristics. Using Crystal Palace lets us modularly integrate tradecraft (call stack ... [Sandro Ackermann](https://avantguard.io/en/blog/author/sandro-ackermann) February 27, 2026 17 min read [![](https://avantguard.io/hs-fs/hubfs/Overview_Plan.png?width=800&name=Overview_Plan.png)](https://avantguard.io/en/blog/threadless-ops) - [Offensive](https://avantguard.io/en/blog/tag/offensive) - [Research](https://avantguard.io/en/blog/tag/research) - [Red Team](https://avantguard.io/en/blog/tag/red-team) ### [Threadless Ops - Enhanced Shellcoding for Threadless Injections](https://avantguard.io/en/blog/threadless-ops) Process Injection is essential in red teaming and serves various strategic objectives, enabling attackers to expand their capabilities. [Sandro Ackermann](https://avantguard.io/en/blog/author/sandro-ackermann) April 17, 2025 23 min read ## Wie sicher sind Ihre Systeme wirklich? Erzählen Sie uns von Ihrem Vorhaben. Sie erhalten ein unverbindliches Angebot. [Offerte anfragen](https://avantguard.io/offerte-anfragen) [+41 55 253 30 30](tel:+41552533030) [![avantguard cyber security](https://avantguard.io/hs-fs/hubfs/LogoInverted.png?width=140&height=66&name=LogoInverted.png)](https://avantguard.io/en/) avantguard cyber security AG Neue Jonastrasse 52 8640 Rapperswil-Jona, Switzerland [+41 55 253 30 30](tel:+41552533030) [info@avantguard.io](mailto:info@avantguard.io) ## Company - [Services](https://avantguard.io/en/services) - [About us](https://avantguard.io/en/about-us) - [Experience](https://avantguard.io/en/experience) - [AI at avantguard](https://avantguard.io/en/ai-at-avantguard) - [Careers](https://avantguard.io/en/careers) - [Research](https://avantguard.io/en/blog) - [Contact](https://avantguard.io/en/contact) ## Services - [Penetration Testing](https://avantguard.io/en/penetration-test) - [Red Teaming](https://avantguard.io/en/red-teaming) - [Attack Simulation](https://avantguard.io/en/attack-simulation) - [FINMA-regulated pentesting](https://avantguard.io/en/finma-regulated-pentesting) - [AD Security Improvement](https://avantguard.io/en/ad_improvement) - [mesher](https://avantguard.io/en/mesher) - [All services](https://avantguard.io/en/services) ## Research - [Does Your New Camera Come with a Backdoor?](https://avantguard.io/en/blog/kommt-ihre-neue-kamera-mit-backdoor) - [The Blind Spot Of 802.1X Network Access Control (NAC)](https://avantguard.io/en/blog/die-blinde-stelle-von-802.1x-network-access-control-nac) - [BlueHammer and RedSun analysed](https://avantguard.io/en/blog/bluehammer-und-redsun-analysiert) - [Plaintext in Memory: Revisiting Browser Password Security](https://avantguard.io/en/blog/klartext-im-speicher-neubewertung-der-passwortsicherheit-im-browser) - [All posts](https://avantguard.io/en/blog) © 2026 avantguard cyber security AG - [Privacy policy](https://avantguard.io/en/privacy-policy) - [Deutsch](https://avantguard.io/)