Spence retweeted
Thanks for the overwhelming support on launch day, it is genuinely appreciated everyone who's taken the time (and their hard earned cash) to purchase the course.
What I negated to include on the launch post was the functions of the platform as I've had a few people ask on DMs and figured only fair to share.
Security & Account
MFA with TOTP supported for additional account security.
Pentest results can be found at lms.zsec.red/security/pentes… helpfully carried out by Shinobi Security
Accessibility
Dark mode, colour-blind modes, reduced motion, font preferences, 15+ language translations with RTL support using i18next
Community
Private Discord server with dedicated support channels (Note that the discord server is on a manual approval basis to prevent spam and abuse)
Ticket-based helpdesk (if you have feedback, bugs or other issues please open a ticket and I'll try to push fixes as soon as I can)
Certificates
When you finish the course you have the option to generate a certificate which will give you a PDF, PNG, JPG and also the ability to verify your certificate, see here for my test account: lms.zsec.red/verify/MAE-2026…
There is also built in 'share to LinkedIn' to help you show off your completion certificate!
Badges / Achievements
Everyone who purchases gets access to 'achievements' and 'badges' which unlock as you progress the course to show what stage you're at, plus you can share your public page by going to badges then click share.
lms.zsec.red/profile/public/…
Every piece of this has been designed to make the learning experience as smooth as possible while keeping the content secure.
Today is the day and I'm sorry it's been so long, and also provisionally delayed by nearly a week.
lms.zsec.red launches today with my Malwareless Adversarial Emulation (MAE) course. If you signed up for the waitlist, you should have received an email.
Spence retweeted
Replying to @SecEventsPen
Thank you for all of the support along the way it's been a lot of hours!
Spence retweeted
Today is the day and I'm sorry it's been so long, and also provisionally delayed by nearly a week.
lms.zsec.red launches today with my Malwareless Adversarial Emulation (MAE) course. If you signed up for the waitlist, you should have received an email.
Spence retweeted
In less than 45 minutes I download free trial copies of Windows Server 2022, Win 10 Enterprise from Microsoft.
Span them up in VM workstation (now free) configured both ready for a new domain, using this walkthrough github.com/myexploit/LAB/blo…
Vulnerable lab built.
Spence retweeted
The first of a few blog posts I have in the wings, introducing LOLSearches, living off the land searches for SharePoint and Windows Explorer
github.com/ZephrFish/LOLSear…
blog.zsec.uk/lolsysadmin/
Spence retweeted
Myself and @00Waz are releasing the Desktop Decoder today, a useful tool to easily display an encoded hex value of the Wiegand data transmitted over the wire from an Access Control reader. Great for anyone into PACs!
github.com/craigsblackie/des…
Spence retweeted
👋 Hey Hackers! Bookmark this FREE Course!!
⚡ CS 390R: Reverse Engineering and Vulnerability Analysis Course.
Complete Course: pwn.umasscybersec.org/lectur…
#reverseengineering #CyberSecurity #bugbountytips
Spence retweeted
The love I got on the webcomic tweet was pretty insane
so of course when i redive into a project i like to be extra
and turned it into an animated web comic instead 😊
be easy on me, i threw this together in under 24 hours, but let me know if you see the vision.
p.s. its not too hard to add additional characters 😉
Spence retweeted
I might be looking for a Belgium-based medior/senior penetration tester soon. If you love working with a badass team, testing awesome customers, and helping blue teams get better … my DMs are open!
Spence retweeted
I'm getting excited about attending @Steel_Con next week! Even made a lovely opening slide for my talk. I'm on from 11 - 12, and then you'll want to stay to see my friend @myexploit2600 who's on right after.
Spence retweeted
Last talk of the day on track 1, feel free to go to the pub instead 👀❤️
Our talk schedule is now live:
docs.google.com/spreadsheets…
For details on all the talks:
steelcon.info/the-event/talk…
Spence retweeted
so on todays episode of why didnt i sleep last night?
I spent all night continuing to build out the dashboard and added more tooling
its sool cool having direct access to the system and being able to display the data in such a visually appealing way
lol my defender protection history was longer than some of your wordlists ha
lowkey been thinking about dropping this dashboard with a powershell for hackers course 🤔
Spence retweeted
HACKERS
ENGINEERS
VOYEURIST
I call upon thee
Retweet and tag some Microsoft folks so we can get some visibility on this issue
#ASSEMBLE
R.I.P. 🪦
trying to turn in that bounty to microsoft is one of the biggest regrets of my life.
My modules are gone, my account is gone
I can make a new one and some of them can be transferred to me, but some are gone forever
i hand delivered that bounty to an employee and they fixed it behind my back without compensation or anything
we went back and forth for 8 months
my @davidbombal interview was supposed to be the day before defcon last year but they patched so much of my work based off my github they learned about from me turning in my bounty that i had to cancel at 1am the day before. Patch notes came out a couple hours later on Aug 8th. Look at the additional security they are finally adding on the right, also my suggestion...
1 of many they have already implemented.
notice NONE of my flipper payloads work anymore?
you cant use "invoke-restmethod" from the run box anymore lol, My company is called "Unit 259". Thats because the run box has a 259 character limit and i specialize in making malware fit in there, popularizing using "invoke-restmethod" in there. They literally killed my origin story.
Even worse, they broke so much i had to cancel my first EVER workshop that was just weeks after that. I had to refund close to $8k. My house is currently in forclosure and that would have changed everything. The workshop was on my birthday too. Remember me disappearing last year around that time? I had to check myself into a hospital.
my heart hurts so much.
if you dont want to pay the bounty fine, but fuck at this point you owe me a consulting fee
man i lost the bounty, lost workshop money, lost personal money, lost thousands of hours of work, basically my will to live and im still fucking broke.
i am so fucking lost
Spence retweeted
Got a new blog out today talking about the utility & importance of normalization when detection engineering & hunting. Some cool queries included - check it out!
sumologic.com/blog/whats-goi…
Spence retweeted
You can use my website to generate a polymorphic reverse shell and store it in a DNS txt record
Instead of just using resolve-dns to pull it down and execute it lets abuse google's DoH service so they not only fetch it for us but the traffic is encrypted and proxied






















