Case Studies

Real Results for Real Threats

See how we've helped organizations across industries identify and remediate critical vulnerabilities. Our case studies demonstrate the real-world impact of professional offensive security testing.

Case Study

From Initial Foothold to Domain Admin: A Complete Active Directory Takeover

Introduction During one pentest engagement, we showed how an attacker could use a single attack vector to take complete control of Active Directory. No zero-day exploits were used. No missing patches were exploited. Instead, the compromise relied exclusively on misconfigurations and day-to-day user behavior. It began with one employee connecting to a malicious Wi-Fi network and ended in full Domain Admin control, complete access to any system, any data, and any account in the organization. Th

Case Study

One IDOR Away From Exposing 2.7 Million Customer Records

Introduction One mistake may impact millions. Orasec recently discovered a severe issue with a popular hotel booking site related to Insecure Direct Object Reference (IDOR) during a security audit, and if exploited, data for 2.7 million people could have been leaked. There weren’t any complex attack chains, zero-days, or malware involved either. Only one missing authorization check was required. This case study illustrates what happened in the issue, how the bug was isolated, what data was p

Case Study

How a Cloud Misconfiguration Nearly Led to a $5M GDPR Fine

Introduction Cloud breaches don't always start with the dramatic scene of an intruder breaking in. Sometimes it starts with just one misstep. This case study revisits a real incident at TechCo, an anonymized mid-sized SaaS player with global reach across North America, Europe, and Asia. TechCo leans heavily on cloud infrastructure to store customer data and run services. Like many modern businesses, they benefited from the speed and flexibility of the cloud. But one innocent misconfiguration

Case Study

Stolen Admin Credentials Found on the Dark Web Before Attackers Could Strike

Introduction Stolen login credentials today rank among the most valuable assets on the dark web. Billions of sets of usernames and passwords are traded on underground markets every year. Once credentials leak-through malware, phishing, or third-party breaches-attackers waste no time in either using or selling them. Healthcare organizations are especially vulnerable. Abusing credentials is the number one way attackers break into healthcare systems, and the damage is often severe. A single brea

Case Study

Shadow Asset: Unsecured Test Server Left Sensitive Customer Data Exposed

Introduction In fintech, speed is everything. New features are built fast, systems scale quickly, and infrastructure changes constantly. But sometimes, speed leaves things behind. This case study covers a real incident handled by Orasec, where a fintech company accidentally exposed sensitive customer data through a forgotten test server. The server was never meant to be public. It wasn’t malicious. It was simply overlooked. That single oversight nearly turned into a serious data breach. This