Chat with a White Hat

The conversation delves into the unforeseen growth of the internet and the challenges it presents for cybersecurity. It also explores the future of the internet and cybersecurity, the pace of change in cybersecurity, and the need for progress in cybersecurity. Takeaways Internet growth Cybersecurity challenges Chapters 00:00 The Unforeseen Growth of the Internet

The conversation delves into the importance of reporting in offensive security, highlighting the need to convey the impact of work and balance hacking with reporting responsibilities. Takeaways Reporting is crucial in offensive security Balancing hacking and reporting is essential for effective penetration testing. Chapters 00:00 The Importance of Reporting in Offensive Security

The conversation covers the early exposure to computers and the influence of family on the interest in computers. Takeaways Early exposure to computers Influence of family on interest in computers Chapters 00:00 Early Exposure to Computers

Discovering a critical security flaw in infrastructure testing led to the realization of the importance of thorough checks and vigilance. The incident highlighted the need to verify all aspects of the system to uncover potential vulnerabilities. Takeaways Thorough checks are essential Vigilance is key Chapters 00:00 Infrastructure Testing and Security Flaws

The conversation delves into the use of AI in security, addressing concerns, optimization, bug discovery, code generation, and its role in penetration testing. It also highlights the need for human guidance in AI-driven security testing. Takeaways AI is being used in security for reporting, password cracking, and bug discovery. AI is seen as a force multiplier for pen testers, making good pen test...

The conversation delves into the significance of the technology being discussed, particularly its impact on the financial industry and the associated vulnerability concerns. Takeaways Importance of the Technology Vulnerability Awareness Chapters 00:00 The Significance of the Technology

The conversation delves into the early days of computer security and the transition from Perl to Python, providing insights into the tools and techniques used during that time. Takeaways Early days of computer security Transition from Perl to Python Chapters 00:00 Early Days of Computer Security

The conversation delves into the nuances of database exploitation and vulnerability, emphasizing the importance of understanding the type of SQL and backend used. It also highlights the significance of database documentation and fingerprinting in the context of cybersecurity. Takeaways Database exploitation depends on the type of SQL and backend used Understanding database documentation and finger...

New episode of Chat with a Whitehat is live. In this Episode, Ed Williams shares his journey from early BASIC programming to leading modern red team operations. We dive into real-world penetration testing stories, offensive security insights, and how AI is reshaping the field—while fundamentals still remain the key to success. 00:00 – 00:32 | Introduction & Ed Williams’ background 00:32 – 02:5...

The conversation delves into the impact of AI on cybersecurity, both in offense and defense. It also explores the accessibility of pen testing for small businesses and individuals, highlighting the changing landscape of cybersecurity. Takeaways AI impact on offensive and defensive cybersecurity Accessibility of pen testing for small businesses and individuals Chapters 00:00 AI Impact on Cybersecur...

Ed Williams shares some of the coolest hacks he has pulled off, including a quick domain admin password discovery and social engineering tactics for gaining access to secure buildings. Takeaways Vulnerability enumeration is crucial in infrastructure testing. Social engineering can be used to gain physical access to secure buildings. Chapters 00:00 Quick Domain Admin Hack

The conversation covers the exploitation of SAML authentication and the vulnerability related to the Audience URI. It also delves into bug bounty and pen testing strategies for identifying and exploiting these vulnerabilities. Takeaways SAML authentication exploitation Audience URI vulnerability Chapters 00:00 SAML Authentication Exploitation

The conversation explores the impact of AI on software development and testing, highlighting the evolution of development processes and the challenges and opportunities presented by AI in testing. Takeaways AI in software development Impact of AI on testing Chapters 00:00 The Evolution of Software Development with AI

The conversation covers the discovery of HTML to PDF vulnerabilities, uncovering CSS injection vulnerabilities, and exploiting zero-day vulnerabilities to demonstrate significant security impacts. It highlights the importance of thorough security testing and the potential impact of zero-day vulnerabilities. Takeaways HTML and CSS injection can lead to significant security vulnerabilities Uncoverin...

The conversation delves into the misconceptions and realities of cybersecurity, highlighting the lack of glamour and the monotonous, meticulous nature of the work. It also touches on the unsocial and frustrating aspects of the field. Takeaways Cybersecurity is not as glamorous as people think It can be unsocial and frustrating at times Chapters 00:00 The Monotony and Meticulousness of Cybersecurit...

The conversation covers Neil Kettle's favorite testing methods, the challenges of pen testing, and the application of first principles in security testing. Takeaways Favorite testing methods Challenges of pen testing First principles in security testing Chapters 00:00 Favorite Testing Methods and Challenges

The conversation covers the importance of articulating the impact of vulnerabilities and the use of AI for quick development and automation. It emphasizes the significance of understanding and communicating the impact of vulnerabilities and the benefits of using AI for rapid development and automation. Takeaways Articulating the impact of a vulnerability is crucial Using AI for quick development a...

The conversation covers the journey from gaming to cybersecurity, the future of red teaming and pen testing, learning from previous engagements, and the impact of AI on security operations. Takeaways Early exposure to gaming led to an interest in cybersecurity Impact of AI on red teaming and pen testing Chapters 00:00 From Gaming to Cybersecurity 17:34 The Future of Red Teaming and Pen Testing 24:...

The conversation covers the importance of understanding the backend code for hacking and the value of documentation in dealing with SQL injection vulnerabilities. Takeaways Understanding the backend code helps with hacking Documentation is super helpful for SQL injection Chapters 00:00 Understanding the Backend Code

The conversation covers advice for individuals looking to break into cyber security and pen testing, emphasizing the importance of showcasing expertise through a blog or YouTube channel and considering automation with AI. Takeaways Start a blog or YouTube channel to showcase expertise Consider automation with AI in cybersecurity Chapters 00:00 Breaking into Cyber Security and Pen Testing

The conversation covers the exploitation of SSRF and LFI vulnerabilities, leading to an account takeover and unauthorized data access. It also highlights the recognition received for the impactful zero-day vulnerability and its real-world consequences. Takeaways SSRF and LFI vulnerabilities led to account takeover and data access Impactful zero-day vulnerability led to significant consequences Cha...

Dylan Lahan, a full-time bug bounty hunter and independent security researcher, shares insights on ethical hacking and cybersecurity. Takeaways Ethical hacking as a career Importance of bug bounty programs Chapters 00:00 Introduction to Ethical Hacking and Bug Bounty Hunting

The conversation emphasizes the critical role of planning in cybersecurity testing, highlighting the need for thorough preparation, open source intelligence, and understanding the environment. It also emphasizes the importance of reflection and different planning approaches for various types of tests. Takeaways Thorough planning is crucial for cybersecurity testing Different types of tests require...

Dylan Lawhon (aka iQimps ) shares his journey from gaming to bug bounty hunting, including real-world hacking stories, zero-day discovery, SAML abuse, and advice for breaking into cybersecurity in 2026. 00:00 – 00:25 Intro & background 00:25 – 01:44 Getting into computers (gaming era) 01:44 – 03:44 First cybersecurity interest (game hacking & PSN breach) 03:44 – 08:30 Early hacking mindset...

The conversation covers the importance of hands-on experience in cybersecurity, the value of starting at the foundational level, and the overlap between offensive and defensive cybersecurity roles. It also emphasizes the need for a strong foundation and the potential risks associated with inexperienced consultants and pen testers. Takeaways Hands-on experience is crucial Start at the foundational...