Akash Kumar

Akash Kumar, founder of AceFortis. Penetration tester and cybersecurity trainer based in Milan, and cybersecurity instructor at DEMOS Fondazione ITS. Expertise: penetration testing, red teaming and Active Directory security. I offer security awareness training, phishing simulations and courses on NIS2, DORA and ISO 27001 for companies and institutions, in English and Italian. Certifications: CPENT, CRTA, eJPT, PT1.
Follow:
160 Articles

SolarWinds: The Supply Chain Attack That Changed Everything

The SolarWinds Supply Chain Attack: Inside the Sunburst Backdoor How Russian hackers…

Akash Kumar
23 Min Read

NetExec (nxc): The Modern Pentesters Swiss Army Knife

NetExec (nxc): The Network Exploitation Tool You Can't Live Without If you're…

Akash Kumar
8 Min Read

Impacket: The AD Attack Toolkit Every Pentester Needs

Impacket: Your Swiss Army Knife for Active Directory Attacks A practitioner's guide…

Akash Kumar
14 Min Read

BloodHound for Active Directory Enumeration: A Practitioners Guide

BloodHound: The Active Directory Attack Path Mapper Your practical guide to finding…

Akash Kumar
106 Min Read

Nmap for Network Reconnaissance: The Complete Guide

Nmap Network Reconnaissance: A Practitioner's Guide Your smart friend's field-tested walkthrough for…

Akash Kumar
13 Min Read

Log4Shell: The Vulnerability That Changed Everything

Log4Shell: The Vulnerability That Made Security Teams Cry CVE-2021-44228 | CVSS 10.0…

Akash Kumar
21 Min Read

Wireshark for Network Analysis: A Practical Guide from the Trenches

Wireshark for Network Analysis: A Practical Guide from the Trenches Grab a…

Akash Kumar
18 Min Read

Shai-Hulud: The npm Worm That Compromised 800+ Packages

The Shai-Hulud npm Worm: How a Self-Propagating Attack Compromised 800+ Packages What…

Akash Kumar
16 Min Read

ChainDrop: The npm Worm That Infected 444 Packages in 4 Hours

ChainDrop: The npm Worm That Infected 444 Packages in 4 Hours August…

Akash Kumar
6 Min Read

wp2shell: The Critical WordPress RCE That Needed No Credentials

wp2shell: The WordPress Pre-Auth RCE That Let Attackers In Without Credentials CVE-2026-63030…

Akash Kumar
5 Min Read