We think we know

“Not everything works as configured. Not everyone behaves as trained.” The reality of this statement makes it possible for us, the people in offensive security, to have a job. It also highlights how unpredictable our work can be and how never-ending our learning process is. We work in a space where things are so complex that we need to combine big-picture, higher-level thinking with boost-on-the-g...

In this episode, we continue to ask the meaningful questions: What makes a great pentester?  How can you balance the art of manual testing with the efficiency of automation? What is the unique value that pentesters bring to offensive security?  And what can't be commoditized in this craft? Gabrielle's mantra, “action for cyberpeace”, resonates through her work, and today, she shares her journey, e...

With 20+ years of cybersecurity work, Tom unpacks the complexities of penetration testing, discussing the roles of vendors, practitioners, and technological advancements.  He also shares his perspective on what makes a good pentester, the value of mentorship, and the ethical challenges in this line of work.  Explore this conversation to learn: How pentesting changed over the years and who’s shapin...

Stay tuned as we explore how tools like Nmap and sqlmap have shaped penetration testing over the last two decades, and stick around to discover which aspects make pentesting predominantly a craft - and which parts have become standardized (and what that means for your work). Unpack this conversation to discover: The depth of the work involved in crafting offensive security tools [04:45] What you c...

Inti not only sheds light on what happens when expectations meet reality, but he also shares his unique approach to problem-solving with real-life examples you can add to your own process.  With 12+ years of experience in this space, Inti De Ceukelaire is a Belgian ethical hacker and cybercrime investigator. He currently works as the Chief Hacker Officer at Europe’s largest vulnerability disclosur...

Today’s guest, Willa Riggins , talks about how “every small piece contributes to the larger picture” in pentesting and explains why “it's about understanding the intricacies and appreciating the craftsmanship." From the mindset behind excellent pentesting work to the (difficult) things that are never going to change in this space, we glide through Willa’s experiences, hard-earned know-how, and tho...

There’s a constant loop of learning, doing, and improving in offensive security. And one way to develop the “muscle” to tackle complex security challenges is through hands-on training . That’s what IppSec, our guest, does with kindness, passion, and in the community’s best interest. IppSec helps us bust a couple of common myths which, if left unquestioned, may alter learning, distort results, and,...

Ready to excel in offensive security this year? Delve into the mind of Vivek Ramachandran, a cybersecurity virtuoso who’s seen (and learned) a lot in this field.  He's a force that fuels both his current company and the broader cybersecurity landscape with original thinking, educational and actionable insights. And there's more to Vivek than just technical savvy. He's on a mission to revolutionize...

If you have questions that boggle your mind about penetration testing, Jayson is the person to learn from.  In the fourth episode of our We think we know podcast, we delve into the world of ethical hacking with the legendary Jayson E. Street .  As an icon in the penetration testing community, Jayson brings a unique blend of wit, wisdom, empathy, and a true understanding of the hacker mindset. He h...

“There is no end goal in this industry. You're always going to keep moving forward.” This quote from our guest does a great job at capturing the conversation we explore in this podcast: the love for the process, the hunger for knowledge, how to add value for clients, and become a better penetration tester.  For the third episode of We think we know, we welcome Tim Connell , an enthusiastic penetra...

It’s not just penetration testing, just like today’s guest is not just an offensive security pro.  If you’re the ambitious type who’s always up for new challenges, then you’re most likely going to resonate with today’s guest and his approach.   Experienced penetration tester and Volkis co-founder, Alexei Doudkine joins us in the second episode of the podcast to debunk pentesting misconceptions.  W...

Welcome to the kick-off episode of the We think we know podcast!  Whether you’re looking for a fresh perspective, to learn about and from our guest, or just to see if this podcast is worth your time, thanks for choosing to spend some time with us! We don’t take it for granted. Today, we've got the fantastic Alethe Denis with us. Wearer of many hats and a generous contributor to the cybersecurity c...

🤩 We’re launching a podcast! On Nov. 7, the first episode of We Think We Know will be in your headphones!  Here's the low-down: 🤔 What is it about? Learning how to be better hackers by challenging assumptions and digging deeper into the why, how, and what of offensive security. In the 1st season, we're unpacking why #penetrationtesting is a craft and *not* a commodity. 🎤 Who’s gonna be on?  Som...