As Promised! I have decided to update my guide for preparing for OSCP. The guide is full of new updates and information to help you prepare for PEN-200/PWK 2.0. If anyone wants to read it here it is: netsecfocus.com/oscp/2021/05…

I’m teaching Breaking In: Physical Intrusion & Social Engineering Tradecraft at WWHF Mile High with Antisyphon Training, Feb. 16–17, 2027 in Denver. Two hands-on days covering OSINT, pretexts, physical intrusion, adaptation, and reporting. bit.ly/alethe-breaking-in?ut…

Opus 5.5 came out. Where is my reset please?

So I'm officially on the market looking for my next role. Honestly I'm looking to help train the next generation, PKI engineering, network engineering, security shenanigans, offensive work, or if you have a password cracking role I'm open.

hey folks, after 6 years my tenure as a CTI analyst at big 4 has come to an end! i learned a lot and worked with the best, but time for new horizons! currently looking for roles in NA/Canada. please retweet for reach and DM me if you have any leads 😇🙏

think I might need a license for sentinelone as well, can yall hook me up ?

FalconFlank : Crowdstrike Falcon 0day LPE is now public github.com/MSNightmare/Falco…

Cliff Stoll's DEF CON talk is now online! I missed it supporting Tati's talk next door, but could see him bouncing around over the talk track dividers... 😂 Highly recommended viewing for nerds and spooks of all generations: To have this man's utter joy for building, learning, and teaching is something to aspire to <3 @DefCon 34 - Stalking the Wily Hacker: 40 years later - Cliff Stoll m.cje.io/3SkKfbi

Slowing moving away from passwords and utilizing yubikeys for login instead. It is super nice to use.

I made a SSH Server which lets you fully remote desktop into another PC with SSH, directly in your terminal! github.com/rylena/sshdesk

Now that the dust has settled and I have recalibrated myself somewhat after hacker summer camp, time to focus back on coaching and taking what I learned in those conversations and making the change. My diary is open for September intake, if you want to know more, let's chat. calendly.com/bc-training/coa…

Want to run an entire Tailscale daemon from memory inside a C2 implant with zero disk artifacts, no kernel drivers, traffic indistinguishable from HTTPS to a CDN, and relay connections from the victim network back through the tailnet. Now you can. Enjoy! netspi.com/blog/technical-bl…

I see many people demotivated due to AI and feels like its been a while since I ranted. Probably a mild take but here is how I stay motivated. Nothing really new just how I use what people have said to keep my motivation up. The normal 2026 disclaimer, what is in this post isn't actually 100% in line with my opinion; yes I know there are holes in my logic but some rabbit holes are best "on read". The biggest change for me is Linus Torvalds saying something along the lines of idk why people say AI makes things, people make thing. If communication was so global in the 70's I am sure people would have said similar things during the conversion from assembly to C. Humans are creating instructions for the compiler to make a program. So why didn't we think the compiler made it? Without internet I think it would take me around 2 minutes to write hello world in C (i know embarrassingly slow but man have i gotten lazy over the years). Do it in assembly? That's probably an hour. Which is a 30x difference of time. Okay now lets say we are in the year 2010 and have Python. I timed myself and it was 3 seconds. That's a 40x time difference from my C. Why did I think I made the program and not python made it? Unfortunately, the only thing I can come up with is how much we communicate and how quick ideas/sentiments can form. I'm sure C/Python got hate when they first came out. Hate can be a really goo fuel -- Most engineers I know have their best work come out of "hate coding" something to prove someone wrong. Only to later realize they social engineered themself into doing an amazing thing. Could be wrong here, but I think Pythons Flask is a good example of this as it started as an April fools joke. Quite literally "the most engineer thing ever" to have a funny joke spiral out of control and grow beyond their wildest dreams... Kind of like that guy that was vibe coding games last year when AI was "bad", or heck even the W̷a̷r̷e̷l̷a̷y̷ C̷L̷A̷W̷D̷I̷S̷ ̷C̷l̷a̷w̷d̷B̷o̷t̷ ̷M̷o̷l̷t̷B̷o̷t̷ ̷ err OpenClaw person. Really with all those name changes I'm shocked they landed at OpenAI instead of MSFT. Anyway, our hate on vibe coding created the sentiment that we aren't creating things anymore (AI makes things). I don't really view it that way, AI just makes me 20-30x faster; which is similar to the jumps between Assembly -> Compiler -> Scripting. Actually now that I think about it, I remember trying to learn C many times because scripting wasn't a "real language" and it would never run a web server or it wasn't capable of editing memory (silly times indeed). AI is enabling us to develop faster and expanding the number of people that can do things, which is not new; quite literally every time we come up with a new way to interact with machines -- it does the same thing. So yes - Anyone can make a cool demo that looks real now but they are still going to spend hours getting AI to work out all the bugs and do it better. To me they are still making something, it is other people telling them they aren't -- Funnily enough, those people trying to convince others they aren't making things, is what in return demotivates themself because it poisons their thought process when it comes to this topic. So uh. If you look for my permission to learn something? Vibe on and let the good times roll. Just make sure you do things safely, obey terms of service, and try not to end humanity. Oh wait. That disclaimer. Using AI in a way that causes humans to spend a lot more time than they are used to is bad mmkay? Seeing all the low effort CTF Work, blog posts, bug bounty, etc does get annoying... oh wait I have a diclaimer to the disclaimer. If you use AI to eat up time of scammers, like tricking call center scammers into chatting with robots for hours, I thank you for your token donation to helping fight that plague.

My WWHF Deadwood workshop covering a portion of this material sold out in minutes. At WWHF Mile High, we get two full days to go much deeper into physical intrusion and social engineering tradecraft. February 2027. Sign up before the seats are gone. antisyphontraining.com/produ…

The book signing event was truly a blast! I met so many great people, each with a unique background and an interesting story to tell. I also had the opportunity to take pictures with absolute legends! Thank you, @nostarch, for organizing this event, and to everyone who showed up. I didn't expect so many of you to join us - you exceeded all my hopes and expectations. Your support means the world to me, and I can't wait to see you at the next @defcon (or even sooner)! #hacking #infosec #cybersecurity #space #book #security @TJ_Null

Using @claudeai for cybersecurity after getting approved through Anthropic’s cyber verification program… only to still get smacked by the same guardrails. That’s like going bowling and bragging about your score with the bumpers up. Bowling with no gutters isn’t bowling.

Don't let my smile fool you. We earned our points by boozing at @HackerJeopardy @lintile @AletheDenis @jcpolo1 @defcon

For your consideration. Rated R for Remote Code Execution.

A quick note in a quiet moment after @defcon… I meant what I said at the end of @HackerJeopardy. If there are to be solutions found to some of the pressing problems that are facing society right now, I’m betting on hackers. Level up, take it to your home towns…

Got some really good feedback from the community about leetha and while I was at defcon I implemented some of those features. Version 1.4 is released: github.com/tjnull/leetha New features include - Updates sources - New baseline settings - Offline and Online detection

Welp that is a wrap for Defcon 34. Here is some of the haul I collected while I was there.