Chat with a White Hat

The conversation covers the importance of network diagrams in pen testing and the need for a partnership approach in security testing. It also highlights the challenges of security testing and the need to work collaboratively with organizations to improve security. Takeaways Partnership approach Challenges in security testing Chapters 00:00 Network Diagrams and Pen Testing

Neil Kettle discovered a bug in 2010 that became public in 2015. He was contracted to create government malware that could key log on Mac OS X without informing the user. He reverse engineered Apple's method and completed the task in 20 minutes. Takeaways Bug discovery in 2010 Creation of government malware Reverse engineering Apple's method Chapters 00:00 Reverse Engineering Apple's Method

The conversation covers advice for breaking into cybersecurity in 2026, emphasizing the importance of fundamentals and contributing to projects. Takeaways Fundamentals are key Contribute to projects and have a body of evidence Chapters 00:00 Breaking into Cybersecurity in 2026

Dylan Lahan, a bug bounty hunter and security researcher, shares his journey from gaming to cybersecurity. His interest in computers was sparked by gaming, leading to his exploration of programming and technical skills. Additionally, early exposure to game hackers influenced his interest in cybersecurity. Takeaways Gaming sparked interest in computers Early exposure to game hackers influenced inte...

Nick Aures, a senior pen tester at Sprocket Security, shares his journey from childhood fascination with computers to his entry into the field of cybersecurity. Takeaways Early exposure to home computing sparked Nick's interest in technology. Nick's interest in cybersecurity began in the mid-2000s with the use of Backtrack, a predominant hacking OS at the time. Chapters 00:00 Entry into Cybersecur...

The conversation delves into a security incident involving infrastructure enumeration and the discovery of a critical security vulnerability. The incident highlights the importance of thorough infrastructure testing and the potential risks associated with security vulnerabilities in network infrastructure. Takeaways Infrastructure Enumeration Security Vulnerabilities Chapters 00:00 Infrastructure...

The conversation covers the topic of computer performance and memory optimization, highlighting the impact of memory on overall performance. Takeaways Memory optimization is crucial for improving computer performance. Maxing out memory can significantly improve a computer's performance. Chapters 00:00 Impact of Memory on Computer Performance

The conversation covers the process of gaining access to the mail server and the challenges faced with the EDR (Endpoint Detection and Response) system. Takeaways Gaining access to the mail server Challenges with EDR Chapters 00:00 Gaining Access to Mail Server

The conversation covers a story about a cool hack and the favorite type of security testing, focusing on web application security testing. The hack involved a simple and elegant approach, while the security testing preference is based on the eye-opening factor and the prevalence of web applications in modern life. Takeaways Simple and elegant hacks Focus on web application security testing Chapter...

Neil Kettle discusses his early interest in computers, starting with his introduction to them at the age of seven and his progression from the Commodore 64 to an interest in logic and mathematics. He then shares his introduction to cybersecurity during his undergraduate studies and the impact of a specific exploit on his understanding of the field. Takeaways Early exposure to computers can shape a...

The future of penetration testing involves the use of AI to test faster and better, allowing for increased testing frequency due to the rapidly changing landscape of technology. Takeaways AI in penetration testing Increased frequency of testing Chapters 00:00 The Future of Penetration Testing with AI

The conversation covers the topic of AI as a new programming language, the experience of working with AI, and the importance of being comfortable with AI technology. Takeaways AI as a new programming language Comfort and familiarity with AI technology Chapters 00:00 AI as a New Programming Language

The conversation covers the topics of authentication and redirection, as well as code execution vulnerabilities. The first chapter explores the challenges of authentication and redirection in web applications, while the second chapter delves into the issue of code execution vulnerabilities and the challenges of addressing them. Takeaways Authentication and Redirection Code Execution Vulnerabilitie...

The conversation delves into the importance of understanding the premise rather than memorizing the antecedent. It emphasizes the natural progression of learning exploit coding and the significance of understanding the core premise. Practice and understanding are highlighted as key elements in the learning process. Takeaways Learn the premise, not the antecedent Practice and understanding are key...

The conversation covers the impact of agentic pen testing on accessibility for small businesses and individuals, as well as the advantages it provides to enterprises in terms of security testing and bug detection. Takeaways Agentic pen testing has made security testing more accessible to small businesses and individuals Enterprises now have pen testers with superpowers to keep up with bad actors a...

The conversation delves into troubleshooting issues with EDR integration and the challenges faced in accessing the EDR web console. Takeaways Troubleshooting EDR integration Challenges with EDR web console access Chapters 00:00 Challenges with EDR Web Console Access

The conversation covers the underestimated vulnerability of execution after redirect and the importance of AI in cybersecurity. It also provides advice for breaking into cybersecurity and pen testing, emphasizing the significance of showcasing seriousness and considering the automation of pen test activities with AI. Takeaways Execution after redirect Importance of AI in cybersecurity Chapters 00:...

The conversation delves into the innovative business model and the concept of turning the pyramid scheme upside down. It explores the implementation of this model and its successful outcome. Takeaways Innovation in business models Upside-down pyramid scheme success Chapters 00:00 Upside-Down Pyramid Scheme

The conversation covers the use of AI in pen testing, the role of cloud code in finding exploits, the balance between autonomy and human-in-the-loop, the impact of AI agents on testing, and the need to test faster and better in a changing landscape. Takeaways AI is transforming pen testing Cloud code is crucial for finding exploits Balancing autonomy and human involvement is key AI agents enable f...

The conversation covers the challenges faced during a six-month engagement, including initial difficulties, pivoting to internal assume breach, and the impact of a running password. It also delves into the preference for red teaming over pen testing and the stress associated with red teaming. Takeaways Engagement Challenges Red Teaming vs Pen Testing Chapters 00:00 Engagement Challenges

The conversation delves into the temptation to skip cybersecurity fundamentals and the importance of reconnaissance and attention to detail in the field of penetration testing. Takeaways Importance of learning and understanding cybersecurity fundamentals Significance of thorough reconnaissance and attention to detail in penetration testing Chapters 00:00 The Temptation to Skip Fundamentals

The conversation covers the discovery and use of a backdoor in Mac OS X, as well as the exploitation of a vulnerability for trolling purposes. The speaker shares insights into the unnoticed exploitation of the backdoor and vulnerability. Takeaways Mac OS X backdoor Vulnerability exploitation Chapters 00:00 Mac OS X Backdoor

Philip Peter Sir and Michel discuss their work experience at Spiralab and Philip's transition from EMEA to North America. Takeaways Work collaboration at Spiralab Transition from EMEA to North America Chapters 00:00 Introductions and Background

The conversation explores the rise of AI in 2021 and the personal experience with Claude Code. Takeaways AI technology gained popularity in 2021 Claude Code has surpassed other available options for the speaker. Chapters 00:00 The Rise of AI in 2021

The conversation delves into the differences between red teaming and pen testing, highlighting the stress and awareness involved in red teaming. The impact of AI on pen testing and red teaming is also discussed, with a focus on the future of these practices. Takeaways Red Teaming AI and Pen Testing Chapters 00:00 Red Teaming vs. Pen Testing