AI tooling and MCP servers are entering enterprises fast, often faster than security teams can assess the risks. During a recent engagement, @xpnsec.com found a new Claude Code vuln (CVE-2025-64755) while exploring MCP abuse paths. 👀 Read the details: ghst.ly/49ybl4W

Still here.. still lurking

My second post for the month is now live 🎉

Talking Heads released a music video for Psycho Killer and it's fucking awesome :D www.youtube.com/watch?v=CJ54...

🚨 New blog post alert! @xpnsec.com drops knowledge on LLM security w/ his latest post showing how attackers can by pass LLM WAFs by confusing the tokenization process to smuggle tokens to back-end LLMs. Read more: ghst.ly/4koUJiz

New blog post is up! Stepping out of my comfort zone (be kind), looking at Meta's Prompt Guard 2 model, how to misclassify prompts using the Unigram tokenizer and hopefully demonstrate why we should invest time looking beyond the API at how LLMs function. specterops.io/blog/2025/06...

The level of snark in my upcoming blogpost is next level... And I'm not even sorry!

Didn’t know this impressive fact. @xpnsec.com did you?

You've been prepping for #OSCP exam day, and it finally arrives. 🙇 In Part 4 of his blog series, @anam0x.bsky.social focuses on the test & how to maximize the educational, financial, & professional value of the exam experience. Read more: ghst.ly/4lHDw4M 🧵: 1/4

Worked on a simple POC last night for connecting Mythic up to LiteLLM (pointing to Claude) for riding shotgun on a C2 session. Only using shell cmd, but provides oversight and hints to potential paths to explore. Quite happy for a weekend project :D youtu.be/C9J5okm6cA4

New AI Slop Avatar, who dis?

WinRMS relay (@Defte_), plaintext Zip attacks (@pfiatde), SQL Server Crypto deep dive (@_xpn_), FindUnusualSessions (@podalirius_), and more! blog.badsectorlabs.com/last-week-in...

Slides from my SOCON 2025 presentation are now up on GitHub github.com/xpn/Presenta...

Awesome post from @atomicchonk.bsky.social on NLP Tokenizing. We need more content like this to show the "how" behind the LLM :) www.corgi-corp.com/post/tokeniz...

Think NTLM relay is a solved problem? Think again. Relay attacks are more complicated than many people realize. Check out this deep dive from Elad Shamir on NTLM relay attacks & the new edges we recently added to BloodHound. ghst.ly/4lv3E31

New blog post 🤗

Celebrating 1 year at SpecterOps, this was the first project I worked on after starting. Looking at SQL Server Transparent Data Encryption, how to bruteforce weak keys, and how ManageEngine's ADSelfService product uses TDE with a suspect key. Enjoy :) specterops.io/blog/2025/04...

Love this article. It’s something that I’ve tried to follow throughout my career, having a line of sight to business profit centres. Even more important in the days of tech layoffs www.seangoedecke.com/where-the-mo...

1 year anniversary at SpecterOps, so many personal and professional achievements in a short space of time. My advice for anyone getting into this field, try and make sure that you work companies and colleagues that push you beyond your comfort level. \o/

I did a talk!! #socon2025

Excited to be at @specterops.bsky.social SO-CON this week!! If you're around, I'll be presenting "Abusing AUs, Confusing the SOC" tomorrow bright & early:

Talking tomorrow so can just enjoy today before the nerves kick in 🤣 #socon2025

#SOCON2025 Time \o/

We are excited to see everyone at #SOCON2025 tomorrow! 🙌 Get the details on everything you need to know before arriving at the conference: specterops.io/so-con

Paged Out! #6 is out! pagedout.institute Totally free, 80 pages, best issue so far! 'nuff said, enjoy! (please repost to help spread out the news!)

Too true! xD

Spent the evening deep diving into MCPs and started a new project: roadrecon_mcp_server! This #MCP takes the web GUI output from the awesome ROADtools by @dirkjanm.io and offers tools to Claude (or your #AI agent of choice) to interact with the data: github.com/atomicchonk/...

Slides ported to SO-CON deck, time to work my presenting skillz \o/

Prepping slides for SO CON 2025... meme time ;)

First time for me :D Not just a hacker.. but a mother fuckin' muffin maker!! (only when on PTO, when bored and cba h4xx0ring).

On PTO and bored, so playing around with MCP by exposing Mythic APIs to Claude and seeing what the result. Attempting to have it emulate threat actors while operating Apollo in a lab... would make a good sparring partner :D www.youtube.com/watch?v=ZooT...

Brilliant talk from @scott.hanselman.com on the realities on LLMs. The temperature demo is such a good way to explain the "magic" behind text generation. www.youtube.com/watch?v=kYUi...

#SCCM forest discovery accounts can be decrypted—even those for untrusted forests. If the site server is a managed client, all creds can be decrypted via Administration Service API. Check out our latest blog post from @unsignedsh0rt.bsky.social to learn more. ghst.ly/4buoISp

A nice reminder that everyone underrates their skills and talent www.youtube.com/watch?v=dZCr...

Just arrived 🍏

When the senior takes over the assessment youtube.com/clip/UgkxQcl...

Time to start selling “mishing” engagements 🤑💰💸

VSCode Extensions & Themes are terrifying. Latest example of a suspected popular malicious theme. Not isolated to VSCode, but being conditioned to not trust random applications, but installing plugins willy nilly...

The Boaty McBoat-Face of popes!

ArenaCross Manchester 🇬🇧🎉

Last year, Evan McBroom introduced LSA Whisperer at #SOCON2024. He’s back for #SOCON2025 with more credential recovery techniques & major tool update that make LSA Whisperer fully assessment-ready. Don’t miss it! Register today ▶️ ghst.ly/socon-bsky

Getting gaslit by Google Chrome in 2025 😂

Started Zero-Day last night (mostly because De Niro, partially because computers). Not bad so far, very far fetched (mentions TAO a few times and "z0mg Russia h4xx0rs", but that's about as tech accurate as it gets). Do love a good tech drama though :D

Tonights track from Soundgarden

Why Microsoft... Why???!! "Remote Desktop" was named just fine 😢

Reviewing the Microsoft AI Critical Thinking paper to see how different industries are using genAI for its strengths, and the foreshadowing of how jobs are likely to change in the short-term. Very small sample set, but at least it gives me data outside of speaking to other basement dwellers 😉

My hot take on personal tradecraft publishing. Do whatever the fuck you want with your own research. It’s your time, your research, your expertise, your evenings spent, your weekends in front of the laptop… and ultimately your decision. Follow me for more inspirational tips.

A fresh macOS install is a good time to play around with the stock nvim dashboard 😍 Thanks to https://buff.ly/4gMlBGH for the artwork 🎨

Interesting to see just how far ahead OpenAI is in popularity from The Impact of Generative AI on Critical Thinking paper. 96% vs 21% on Gemini. There is an age-skew, but this paper is very good at reviewing peoples usage of GenAI outside of our bubble.