martinsohn.dk

What It Is

martinsohn.dk is the personal security research and tools homepage of Martin Sohn Christensen. Its content focuses on security tools for developers as well as offensive and defensive security research. It is not a traditional SaaS product or IDE plugin platform; it is more like a personal knowledge base and tool index, bringing together a BloodHound query library, BloodHound extensions, a CIS Controls assessment spreadsheet, Office phishing templates and defensive guidance, a PowerShell reverse shell, related articles, talks, and CVE records.

Core Capabilities

Based on the crawled content, the most notable resources are those related to the BloodHound ecosystem. BloodHound Query Library is a community-driven query repository, while ManagerOfHound is designed to identify manager-subordinate privilege escalation paths in BloodHound OpenGraph. For people working on Active Directory attack path analysis, identity security assessments, and red team exercises, these resources have strong practical value. The site also provides a CIS Controls v8 initial assessment spreadsheet, useful for security teams taking inventory of their controls. Article series on email security, SID filtering, Kerberos, network share risks, MSI installer privilege escalation, and related topics also show solid research depth.

Pricing and Delivery

The main content does not mention commercial pricing, subscriptions, payment methods, or enterprise support. The resources appear to be primarily public materials. There is also no clear description of an API, SDK, self-hosted deployment method, or license, so it should not be evaluated as a mature product platform. Tool availability likely depends on external repositories or documentation links, but the crawled text does not include specific installation steps.

Pros and Cons

The strengths are its focused topics and strong technical depth, especially for researchers working on Active Directory, BloodHound, email security, and privilege escalation. Many pieces also include defensive recommendations, not just attack examples. The drawbacks are that the site is closer to a personal homepage, with no unified documentation, release notes, support channels, or clear compliance boundaries. Some resources, such as phishing templates and reverse shells, are clearly dual-use and must only be used in authorized testing and defensive research contexts.

Who It’s For and Access from China

It is suitable for red teams, penetration testers, identity security engineers, blue team detection engineers, and security training instructors. It is not suitable for teams looking for an out-of-the-box commercial security platform. Access from mainland China cannot be determined from the main content, so it is marked as unknown.