XPN
@xpnsec.com
📤 1598
📥 139
📝 205
Hacker for hire at
@specterops.bsky.social
Blog:
https://blog.xpnsec.com
Still here.. still lurking
28 days ago
1
9
0
My second post for the month is now live 🎉
add a skeleton here at some point
5 months ago
2
13
2
Talking Heads released a music video for Psycho Killer and it's fucking awesome :D
www.youtube.com/watch?v=CJ54...
loading . . .
Talking Heads - Psycho Killer (Official Video)
YouTube video by Talking Heads
https://www.youtube.com/watch?v=CJ54eImz88w
6 months ago
0
3
0
reposted by
XPN
SpecterOps
6 months ago
🚨 New blog post alert!
@xpnsec.com
drops knowledge on LLM security w/ his latest post showing how attackers can by pass LLM WAFs by confusing the tokenization process to smuggle tokens to back-end LLMs. Read more:
ghst.ly/4koUJiz
loading . . .
Tokenization Confusion - SpecterOps
Meta's Prompt Guard 2 aims to prevent prompt injection. This post looks at how much knowledge of ML we need to be effective at testing these LLM WAFs.
https://ghst.ly/4koUJiz
0
10
5
New blog post is up! Stepping out of my comfort zone (be kind), looking at Meta's Prompt Guard 2 model, how to misclassify prompts using the Unigram tokenizer and hopefully demonstrate why we should invest time looking beyond the API at how LLMs function.
specterops.io/blog/2025/06...
loading . . .
Tokenization Confusion - SpecterOps
Meta's Prompt Guard 2 aims to prevent prompt injection. This post looks at how much knowledge of ML we need to be effective at testing these LLM WAFs.
https://specterops.io/blog/2025/06/03/tokenization-confusion/
6 months ago
0
5
2
The level of snark in my upcoming blogpost is next level... And I'm not even sorry!
6 months ago
0
12
0
reposted by
XPN
Marc Smeets
7 months ago
Didn’t know this impressive fact.
@xpnsec.com
did you?
add a skeleton here at some point
1
1
1
reposted by
XPN
SpecterOps
7 months ago
You've been prepping for
#OSCP
exam day, and it finally arrives. 🙇 In Part 4 of his blog series,
@anam0x.bsky.social
focuses on the test & how to maximize the educational, financial, & professional value of the exam experience. Read more:
ghst.ly/4lHDw4M
🧵: 1/4
loading . . .
1
7
2
Worked on a simple POC last night for connecting Mythic up to LiteLLM (pointing to Claude) for riding shotgun on a C2 session. Only using shell cmd, but provides oversight and hints to potential paths to explore. Quite happy for a weekend project :D
youtu.be/C9J5okm6cA4
loading . . .
Superintendent POC
YouTube video by Adam Chester
https://youtu.be/C9J5okm6cA4
7 months ago
0
15
1
New AI Slop Avatar, who dis?
7 months ago
1
7
0
reposted by
XPN
Bad Sector Labs
7 months ago
WinRMS relay (@Defte_), plaintext Zip attacks (@pfiatde), SQL Server Crypto deep dive (@_xpn_), FindUnusualSessions (@podalirius_), and more!
blog.badsectorlabs.com/last-week-in...
loading . . .
Last Week in Security (LWiS) - 2025-04-14
WinRMS relay (@Defte_), plaintext Zip attacks (@pfiatde), SQL Server Crypto deep dive (@_xpn_), FindUnusualSessions (@podalirius_), and more!
https://blog.badsectorlabs.com/last-week-in-security-lwis-2025-04-14.html
0
5
2
Slides from my SOCON 2025 presentation are now up on GitHub
github.com/xpn/Presenta...
loading . . .
Presentations/SOCON2025 at main · xpn/Presentations
A collections of presentations. Contribute to xpn/Presentations development by creating an account on GitHub.
https://github.com/xpn/Presentations/tree/main/SOCON2025
7 months ago
0
8
0
Awesome post from
@atomicchonk.bsky.social
on NLP Tokenizing. We need more content like this to show the "how" behind the LLM :)
www.corgi-corp.com/post/tokeniz...
loading . . .
Tokenizing the Sandwich Debate: How NLP Models Weigh In on Hot Dogs
Get the gist for Natural Language Processing (NLP) and how tokenization plays a factor
https://www.corgi-corp.com/post/tokenizing-the-sandwich-debate-how-nlp-models-weigh-in-on-hot-dogs
8 months ago
0
7
0
reposted by
XPN
SpecterOps
8 months ago
Think NTLM relay is a solved problem? Think again. Relay attacks are more complicated than many people realize. Check out this deep dive from Elad Shamir on NTLM relay attacks & the new edges we recently added to BloodHound.
ghst.ly/4lv3E31
1
27
22
New blog post 🤗
add a skeleton here at some point
8 months ago
0
13
2
Celebrating 1 year at SpecterOps, this was the first project I worked on after starting. Looking at SQL Server Transparent Data Encryption, how to bruteforce weak keys, and how ManageEngine's ADSelfService product uses TDE with a suspect key. Enjoy :)
specterops.io/blog/2025/04...
loading . . .
The SQL Server Crypto Detour - SpecterOps
As part of my role as Service Architect here at SpecterOps, one of the things I’m tasked with is exploring all kinds of technologies to help those on assessments with advancing their engagement. Not l...
https://specterops.io/blog/2025/04/08/the-sql-server-crypto-detour/
8 months ago
1
15
3
Love this article. It’s something that I’ve tried to follow throughout my career, having a line of sight to business profit centres. Even more important in the days of tech layoffs
www.seangoedecke.com/where-the-mo...
loading . . .
Knowing where your engineer salary comes from
How tech companies make money and why it's important
http://www.seangoedecke.com/where-the-money-comes-from/
8 months ago
0
5
0
1 year anniversary at SpecterOps, so many personal and professional achievements in a short space of time. My advice for anyone getting into this field, try and make sure that you work companies and colleagues that push you beyond your comfort level. \o/
8 months ago
0
23
1
I did a talk!!
#socon2025
8 months ago
1
20
0
reposted by
XPN
Katie Knowles
8 months ago
Excited to be at
@specterops.bsky.social
SO-CON this week!! If you're around, I'll be presenting "Abusing AUs, Confusing the SOC" tomorrow bright & early:
1
15
7
Talking tomorrow so can just enjoy today before the nerves kick in 🤣
#socon2025
8 months ago
3
18
0
#SOCON2025
Time \o/
8 months ago
0
5
0
reposted by
XPN
SpecterOps
8 months ago
We are excited to see everyone at
#SOCON2025
tomorrow! 🙌 Get the details on everything you need to know before arriving at the conference:
specterops.io/so-con
0
16
4
reposted by
XPN
Gynvael Coldwind
8 months ago
Paged Out! #6 is out!
pagedout.institute
Totally free, 80 pages, best issue so far! 'nuff said, enjoy! (please repost to help spread out the news!)
0
25
19
Too true! xD
8 months ago
0
4
0
reposted by
XPN
Max Andreacchi
8 months ago
Spent the evening deep diving into MCPs and started a new project: roadrecon_mcp_server! This
#MCP
takes the web GUI output from the awesome ROADtools by
@dirkjanm.io
and offers tools to Claude (or your
#AI
agent of choice) to interact with the data:
github.com/atomicchonk/...
loading . . .
GitHub - atomicchonk/roadrecon_mcp_server: Claude MCP server to perform analysis on ROADrecon data
Claude MCP server to perform analysis on ROADrecon data - atomicchonk/roadrecon_mcp_server
https://github.com/atomicchonk/roadrecon_mcp_server
2
11
5
Slides ported to SO-CON deck, time to work my presenting skillz \o/
8 months ago
1
13
0
Prepping slides for SO CON 2025... meme time ;)
8 months ago
1
14
0
First time for me :D Not just a hacker.. but a mother fuckin' muffin maker!! (only when on PTO, when bored and cba h4xx0ring).
8 months ago
2
16
0
On PTO and bored, so playing around with MCP by exposing Mythic APIs to Claude and seeing what the result. Attempting to have it emulate threat actors while operating Apollo in a lab... would make a good sparring partner :D
www.youtube.com/watch?v=ZooT...
loading . . .
Mythic MCP - Claude Sonnet driving Mythic (Apollo)
YouTube video by Adam Chester
https://www.youtube.com/watch?v=ZooTlwajQT4
8 months ago
1
20
6
Brilliant talk from
@scott.hanselman.com
on the realities on LLMs. The temperature demo is such a good way to explain the "magic" behind text generation.
www.youtube.com/watch?v=kYUi...
loading . . .
Keynote: AI without the BS, for humans - Scott Hanselman - NDC London 2025
YouTube video by NDC Conferences
https://www.youtube.com/watch?v=kYUicaho5k8
9 months ago
1
47
16
reposted by
XPN
SpecterOps
9 months ago
#SCCM
forest discovery accounts can be decrypted—even those for untrusted forests. If the site server is a managed client, all creds can be decrypted via Administration Service API. Check out our latest blog post from
@unsignedsh0rt.bsky.social
to learn more.
ghst.ly/4buoISp
loading . . .
Decrypting the Forest From the Trees - SpecterOps
TL;DR: SCCM forest discovery accounts can be decrypted including accounts used for managing untrusted forests. If the site server is a managed client, service account credentials can be decrypted via ...
https://ghst.ly/4buoISp
1
22
15
A nice reminder that everyone underrates their skills and talent
www.youtube.com/watch?v=dZCr...
loading . . .
Dave Grohl Inspired By Disco Drum Beats
YouTube video by Vocal Vibes
https://www.youtube.com/watch?v=dZCrdSC2-1I
9 months ago
0
4
1
9 months ago
0
2
0
Just arrived 🍏
9 months ago
0
20
1
When the senior takes over the assessment
youtube.com/clip/UgkxQcl...
loading . . .
YouTube
Share your videos with friends, family, and the world
https://youtube.com/clip/UgkxQclAJi-6veP4PqwWdv9Hb-oM3kdCCJLp?si=EE0ufKqdbsWHtVVP
9 months ago
0
1
0
Time to start selling “mishing” engagements 🤑💰💸
9 months ago
0
3
0
VSCode Extensions & Themes are terrifying. Latest example of a suspected popular malicious theme. Not isolated to VSCode, but being conditioned to not trust random applications, but installing plugins willy nilly...
loading . . .
Hi - Isidor here from the VS Code team. A member of the community did a deep sec... | Hacker News
A member of the community did a deep security analysis of the extension and found multiple red flags that indicate malicious intent and reported this to us. Our security researchers at Microsoft…
https://news.ycombinator.com/item?id=43181591
9 months ago
0
11
4
The Boaty McBoat-Face of popes!
add a skeleton here at some point
9 months ago
1
2
0
ArenaCross Manchester 🇬🇧🎉
9 months ago
0
5
0
reposted by
XPN
SpecterOps
9 months ago
Last year, Evan McBroom introduced LSA Whisperer at
#SOCON2024
. He’s back for
#SOCON2025
with more credential recovery techniques & major tool update that make LSA Whisperer fully assessment-ready. Don’t miss it! Register today ▶️
ghst.ly/socon-bsky
0
13
1
Getting gaslit by Google Chrome in 2025 😂
9 months ago
0
8
0
Started Zero-Day last night (mostly because De Niro, partially because computers). Not bad so far, very far fetched (mentions TAO a few times and "z0mg Russia h4xx0rs", but that's about as tech accurate as it gets). Do love a good tech drama though :D
loading . . .
ZERO DAY | Official Trailer | Netflix
How can you seek the truth when you can’t even trust your own mind? In the wake of a devastating cyber attack, a former President (Robert #DeNiro) is tasked ...
https://www.youtube.com/watch?v=FOfBiiPdQPI
9 months ago
1
6
0
Tonights track from Soundgarden
loading . . .
Soundgarden - Blow Up The Outside World
REMASTERED IN HD!Music video by Soundgarden performing Blow Up The Outside World. (C) 1996 A&M Records#Soundgarden #BlowUpTheOutsideWorld #Remastered #Vevo
https://www.youtube.com/watch?v=sC2GjXMk7i4
9 months ago
0
2
0
Why Microsoft... Why???!! "Remote Desktop" was named just fine 😢
9 months ago
3
7
2
Reviewing the Microsoft AI Critical Thinking paper to see how different industries are using genAI for its strengths, and the foreshadowing of how jobs are likely to change in the short-term. Very small sample set, but at least it gives me data outside of speaking to other basement dwellers 😉
9 months ago
0
6
1
My hot take on personal tradecraft publishing. Do whatever the fuck you want with your own research. It’s your time, your research, your expertise, your evenings spent, your weekends in front of the laptop… and ultimately your decision. Follow me for more inspirational tips.
9 months ago
1
25
1
A fresh macOS install is a good time to play around with the stock nvim dashboard 😍 Thanks to
https://buff.ly/4gMlBGH
for the artwork 🎨
9 months ago
0
6
1
Interesting to see just how far ahead OpenAI is in popularity from The Impact of Generative AI on Critical Thinking paper. 96% vs 21% on Gemini. There is an age-skew, but this paper is very good at reviewing peoples usage of GenAI outside of our bubble.
9 months ago
1
3
0
And just like that, dotfiles are up. Need to move to Sequoia but that's a tonight job, apple servers be sloooow.
add a skeleton here at some point
9 months ago
2
3
0
Load more
feeds!
log in