More Offensive Than Ever #PenTest | #PurpleTeam | #RedTeam | #ExploitDev Training, Certification, and Research
The Internet
Joined October 2010
- Tweets19.3K
- Following578
- Followers74.9K
- Likes12.2K
Tomorrow: IoT or wireless? Know the difference.
James Leyte-Vidal and Larry Pesce will compare SEC556 and SEC617 while covering new labs, AI-assisted workflows, hardware kits, and host-platform support.
🔗 buff.ly/cmxuKwn
💜 🗞️ In this episode of The Weekly #PurpleTeam, @BRIPWN covers DLL sideloading using an Adaptix Beacon payload hidden inside python315.dll, a technique attackers use to execute malicious code under the cover of a legitimate, signed process.
👉️ buff.ly/zd8w8bl
Connected devices demand a different testing approach than wireless environments. James Leyte-Vidal and Larry Pesce will break down where SEC556 and SEC617 differ so practitioners can match the training to their targets and responsibilities.
🔗 buff.ly/cmxuKwn
Attackers are abusing vulnerable Windows kernel drivers to disable EDR, while #Microsoft is tightening driver security.
SEC665 teaches #RedTeam operators to investigate kernel internals and understand how security products monitor activity.
💻️ buff.ly/D10ovhr
Your C2 server should not be so easy to find.
David Mayer will show how redirectors add separation between operators and backend infrastructure, helping Red Teams control how traffic reaches C2 while reducing unnecessary exposure.
🔗 buff.ly/2paq1Qn
Give an AI agent a codebase, and you'll get answers.
Give it the right context, tools, and constraints, and you'll get something worth investigating.
#SEC543 teaches you how to configure and guide AI coding agents for penetration testing.
Learn more: buff.ly/p8VRFxz
#SEC660 now incorporates AI into exploit research, vulnerability analysis, scripting, and bug discovery while preserving the technical depth needed to validate findings and understand what actually works.
🐍 Watch “Exploiting the Network” here: buff.ly/J8s6et3
This session will cover the new AI-assisted analysis workflows, revised hardware kits, updated hands-on labs, and expanded host-platform support across SEC556 and SEC617.
📅 Oct 20 | 12:00 PM ET
🔗 buff.ly/IkzdBoC
#SEC556 #SEC617 #PenTesting #OffensiveSecurity
IoT and wireless testing may overlap, but they are not the same job.
James Leyte-Vidal and Larry Pesce will compare SEC556 and SEC617, from hardware, firmware, APIs, and network traffic to Wi-Fi, Bluetooth, RFID, NFC, and software-defined radio.
🔗 buff.ly/cmxuKwn
💜 🗞️ An object deleted in AD doesn't vanish immediately. In this episode of The Weekly #PurpleTeam, Brian Almond covers a lesser-known Active Directory persistence and privilege escalation technique: reanimating tombstoned objects using NetExec.
🪦 Watch: buff.ly/tK3ghrM
Environments are built on trust, and adversaries spend their time looking for ways to abuse it. The updated #SEC565 explores how access expands, trust is exploited, and defensive assumptions are tested through realistic adversary emulation.
🐉 Register: go.sans.org/uMFjWn
Attack with AI and attack AI itself.
SEC537 brings Offensive AI + Adversarial AI into one 6-day learning path, combining SEC535 and SEC536 for practitioners who want both disciplines.
🤼: go.sans.org/PHMEA7
Learn more about the details here: go.sans.org/Ru5FXT
The updated #SEC617 is officially live!
Wi-Fi client coverage now includes Windows 11, giving practitioners current techniques for assessing how modern endpoints discover, select, and connect to wireless networks.
🛜 Read more: buff.ly/Dq0JJEk
#PenetrationTesting
New keynotes & panelists announced for SANS #AISummit Fall 2026.
Explore agentic attack surfaces, AI-enabled security workflows, emerging threats & where AI changes the game for attackers and defenders.
🗓️ Nov. 2–3
📍 Arlington, VA & Live Online
➡️ go.sans.org/USUvPm
Most #LLM failures come from poor context, weak workflows, or missing guardrails. Download the new LLM Usage cheat sheet and build more reliable AI-assisted workflows with practical guidance on prompting, evals, agents, MCP, and security risks.
🤖 buff.ly/71JG2z9
💜 🗞️ In this episode of #TheWeeklyPurpleTeam, @bripwn covers a BYOVD attack using BTR_CLI to strip Windows Defender protections at the kernel level by deleting Defender files, modifying registry keys, and removing Defender from the host entirely.
👉️ buff.ly/x3cY6MU
SANS Offensive Operations retweeted
Success lies not in executing the loop perfectly once, but in cycling through it as many times as necessary to achieve true incident resolution." –SANS Fellow Joshua Wright
“This course advances operators to the next stage of their tradecraft, enabling precise, stealthy objective execution rooted in strong OPSEC and methodologies not tied to specific tools.” Karim Lalji, #SEC665 co-author
🥷 Learn more: sans.org/cyber-security-cour…
