Always happens when I take time off I end up writing things, here's the latest post blog.zsec.uk/baselining-w... all about learning the baselines of Windows, it doesn't cover everything and anything but I've spun up a lab with observability and tried to write some detections baselining. Enjoy!

🕹️ SPEAKER ANNOUNCEMENT 🎮️ We're excited to have @zephrfish.yxz.red presenting his talk 'Archaic Creativity: Pulling At Infinite Threads'. Catch Andy's talk on Track 1, and keep an eye on our website and socials for the full schedule release! #BSidesLeeds #SpeakerAnnouncement

It’s been 10 years since I published my first book(LTR101), so to celebrate I’m giving 10% off my red team course, Malwareless Adversarial Emulation (MAE). Check it out here: lms.zsec.red Discount code: LTR101-10Y Valid until the end of August 2026.

It's clear to see the amount of work that's gone into it — please do take a look: lms.zsec.red #HackGlasgow2026 #SponsorAnnouncement

We're delighted to announce ZephrSec as a sponsor for Hack Glasgow 2026! Founder @zephrfish.yxz.red is an experienced red teamer, author, regular attendee (and previous speaker) at our Hack Thursday meetup, and keen supporter of the cyber security community, especially in his home town of Glasgow.

Welcome onboard ZephrSec! 🎉 ZephrSec is all about giving back to the community, helping others grow through hands-on training, adversarial emulation, and real-world security insights. Levelling up the next generation of defenders & attackers 🚀 lms.zsec.red @zephrfish.yxz.red

This is what happens when I take time off, I actually write silly length blog posts and deep dive things blog.zsec.uk/bullyingllms/ the post dives into a MCP pipeline I've put together for autonomous 0day hunts.

You've got till Friday 3rd to submit your talks and workshops. We've got plenty of talks but could do with a few more workshops, so if you've got an idea, but aren't sure, submit it anyway and let us decide forms.gle/hLXt1dibQrA6...

It's 4 weeks to the date since I launched ZephrSec Ltd LMS and Malwareless Adversarial Emulation(MAE), here's a blog post about a lot of the challenges, lessons learnt and general chaos of building and running your own platform and all the fun that follows building blog.zsec.uk/roll-your-ow...

With Easter coming up quick it is time for a date announcement. 1 March - CFP and call for crew opens 1 April - Pre talk announcement tickets 3 April CFP and CFC closes ~ 20 April speakers confirmed ~ 24 April main ticket drop Links and stuff coming closer to the dates.

Our first fully committed sponsor is @zephrfish.yxz.red. Long time supporter as a speaker and now a sponsor as well. Andy would like everyone to know about his Malwareless Adversarial Emulation training course lms.zsec.red We may be biased, but we reckon it is top quality stuff.

Since launching MAE over the weekend I’ve had a lot of great feedback from the community and I want to say how thankful I am for everyone’s support. One of the requests I had was for multi language support on subtitles, so I went ahead and added it to the platform. go check it out lms.zsec.red

I love watching my friends create awesome stuff. @zephrfish.yxz.red made some artisan, farm to table, shell to terminal red team training for you. lms.zsec.red

I've been looking forward to @zephrfish.yxz.red's new course, Malwareless Adversarial Emulation. Just by looking at the course syllabus, I'm confident I'm going to learn a ton and become a better operator. And the price to value is more than reasonable. The course is at lms.zsec.red

Today’s the day, finally got around to publishing my red team course, with video, written and self spin up labs. lms.zsec.red

Turns out I’m not very active on here or Twitter anymore even though over the years I’ve accumulated 19k followers on Twitter 😬

Made a thing, mucking about with python and a LDAP browser concept to ingest straight into BloodHound but also just a nice alternative to ADExplorer with fewer LDAP queries, simple LDAP browser using PyQt as a GUI and neo4j-driver to ingest into BH. github.com/ZephrFish/py... #bloodhound #redteam

Couple updates: Course Trailer and Sign Up: mae.zsec.red GoClipC2 - blog.zsec.uk/clippy-goes-...

Weekends are for random projects Here is a blog post all around Kerberos errors and a bonus interactive app built in collaboration with @thecontractor.io Errorism Index for Kerberos blog.zsec.uk/common-tool-... kerberos.errorism.io

Weekends are for random projects Here is a blog post all around Kerberos errors and a bonus interactive app built in collaboration with @thecontractor.io Errorism Index for Kerberos blog.zsec.uk/common-tool-... kerberos.errorism.io

Should probably start writing my talk then

First round of talk emails have just gone out. We had over 40 submissions for 18 slots so unfortunately have had to reject over half of them. If you haven't had an email yet, please hang on, more will be sent out shortly as we finalise other things.

A thousand sunsets and each one will differ slightly

Elbows up, Canada.

Want a nice Sunday hack? The function that android has had for years but a nice to have on iPhone, estimated minutes to charge.

There we go submitted a thing

Sign it nerds you.38degrees.org.uk/petitions/ke...

Here's RepoMan, a proof of concept surrounding git commit poisoning. The blog post dives a little deeper into how it all works and the rationale behind it. blog.zsec.uk/navigating-a... github.com/ZephrFish/Re...

Here's RepoMan, a proof of concept surrounding git commit poisoning. The blog post dives a little deeper into how it all works and the rationale behind it. blog.zsec.uk/navigating-a... github.com/ZephrFish/Re...

Finally got around to finishing the series here's part 3 of my NUC stack series blog.zsec.uk/homelab-clus...

Better to be a warrior in a garden than a gardener in a war

Following up on my talk, I mentioned if you wanted to get my books for free, you could probably find them on Google; well, there's no need. I've set the bundle on leanpub for the ebook to $0.00, aka free, so you can get a copy of both LTR101 and LTR102! leanpub.com/b/LearningTh... #SecuriTay2025

Dundee I have arrived 👋🏻

Got a busy few months ahead but I will eventually finish the NUC series! If you missed the first two parts they're here: blog.zsec.uk/homelab-clus... blog.zsec.uk/homelab-clus...

Slides are done for SecuriTay and talk will be tomorrow afternoon on track 1, come along and listen to "Think Like an Adversary" designed to show both sides of the coin what a real world attack looks like and where the detection opportunities exist

As I slowly ease back into using socials I think I'm going to fully move off of Twitter and keep my account locked but rather post on here. If you followed me from Twitter hello again! But if you're new here, welcome! I post a mix of photography, hacks, rants and everything in between 🤘🏻

12 years ago I went to see You Me At Six, and in 5 weeks time I'll see them again at their final gig in Glasgow🥲

I’m a fucking morning person on the weekends but not the week, why brain

Scotland get your coat

Not everything I build is a security tool, I wrote a blog post 8 years ago now about monitoring my home internet speed and decided the other morning to dockerise it because why not? github.com/ZephrFish/Do... so here's a docker image for monitoring download speed :)

What the fuck is kubernetes anyways?

Back to hacks tomorrow and the annual "have I forgotten how to do my job" dance

As is tradition, I've done it a few years in the past. Here's my year in review, the research, talks, blog posts and general bits and pieces I've put together this year. blog.zsec.uk/2024-unwrapp...

spent my time off not doing tool or building stuff but instead playing a fuck ton of COD BO6 Zombies :D

A good day was had

currently

I love shooting pics in the fog

New on the blog 📷✨ #photography #streetphotography #fujifilm