Cyber Geek, Pentester, Social Engineer & all round awesome guy! Should have been in the Avengers, but all the spots were taken! Views/opinions are my own 🙊

Certified Bic Pentester
Joined May 2014
Spence retweeted
Thanks for the overwhelming support on launch day, it is genuinely appreciated everyone who's taken the time (and their hard earned cash) to purchase the course. What I negated to include on the launch post was the functions of the platform as I've had a few people ask on DMs and figured only fair to share. Security & Account MFA with TOTP supported for additional account security. Pentest results can be found at lms.zsec.red/security/pentes… helpfully carried out by Shinobi Security Accessibility Dark mode, colour-blind modes, reduced motion, font preferences, 15+ language translations with RTL support using i18next Community Private Discord server with dedicated support channels (Note that the discord server is on a manual approval basis to prevent spam and abuse) Ticket-based helpdesk (if you have feedback, bugs or other issues please open a ticket and I'll try to push fixes as soon as I can) Certificates When you finish the course you have the option to generate a certificate which will give you a PDF, PNG, JPG and also the ability to verify your certificate, see here for my test account: lms.zsec.red/verify/MAE-2026… There is also built in 'share to LinkedIn' to help you show off your completion certificate! Badges / Achievements Everyone who purchases gets access to 'achievements' and 'badges' which unlock as you progress the course to show what stage you're at, plus you can share your public page by going to badges then click share. lms.zsec.red/profile/public/… Every piece of this has been designed to make the learning experience as smooth as possible while keeping the content secure.
Today is the day and I'm sorry it's been so long, and also provisionally delayed by nearly a week. lms.zsec.red launches today with my Malwareless Adversarial Emulation (MAE) course. If you signed up for the waitlist, you should have received an email.
1
4
34
6,872
Spence retweeted
Replying to @SecEventsPen
Thank you for all of the support along the way it's been a lot of hours!
1
1
156
Spence retweeted
Today is the day and I'm sorry it's been so long, and also provisionally delayed by nearly a week. lms.zsec.red launches today with my Malwareless Adversarial Emulation (MAE) course. If you signed up for the waitlist, you should have received an email.
10
42
9
228
38,484
In less than 45 minutes I download free trial copies of Windows Server 2022, Win 10 Enterprise from Microsoft. Span them up in VM workstation (now free) configured both ready for a new domain, using this walkthrough github.com/myexploit/LAB/blo… Vulnerable lab built.
1
47
1
153
12,221
Myself and @00Waz are releasing the Desktop Decoder today, a useful tool to easily display an encoded hex value of the Wiegand data transmitted over the wire from an Access Control reader. Great for anyone into PACs! github.com/craigsblackie/des…
1
8
2
20
1,809
👋 Hey Hackers! Bookmark this FREE Course!! ⚡ CS 390R: Reverse Engineering and Vulnerability Analysis Course. Complete Course: pwn.umasscybersec.org/lectur… #reverseengineering #CyberSecurity #bugbountytips
4
102
3
374
20,363
The love I got on the webcomic tweet was pretty insane so of course when i redive into a project i like to be extra and turned it into an animated web comic instead 😊 be easy on me, i threw this together in under 24 hours, but let me know if you see the vision. p.s. its not too hard to add additional characters 😉
25
9
2
138
8,285
I might be looking for a Belgium-based medior/senior penetration tester soon. If you love working with a badass team, testing awesome customers, and helping blue teams get better … my DMs are open!
1
12
1
13
5,057
I'm getting excited about attending @Steel_Con next week! Even made a lovely opening slide for my talk. I'm on from 11 - 12, and then you'll want to stay to see my friend @myexploit2600 who's on right after.
1
3
1
18
1,120
I made a powershell module for hiding payloads in the pixels of an image That payload that's embedded can then be extracted and executed with the one liner that is also generated for you it really doesnt get much stealthier than this 😈
16
92
1
467
44,866
I made a powershell module to work with the LOLBAS project website to automate LOLBIN hunting and execution on your system this is a really cool way to learn what the current active lolbins are and how to use them
10
56
1
258
21,446
Last talk of the day on track 1, feel free to go to the pub instead 👀❤️
1
1
7
1,458
so on todays episode of why didnt i sleep last night? I spent all night continuing to build out the dashboard and added more tooling its sool cool having direct access to the system and being able to display the data in such a visually appealing way lol my defender protection history was longer than some of your wordlists ha lowkey been thinking about dropping this dashboard with a powershell for hackers course 🤔
4
11
80
6,813
HACKERS ENGINEERS VOYEURIST I call upon thee Retweet and tag some Microsoft folks so we can get some visibility on this issue #ASSEMBLE
R.I.P. 🪦 trying to turn in that bounty to microsoft is one of the biggest regrets of my life. My modules are gone, my account is gone I can make a new one and some of them can be transferred to me, but some are gone forever i hand delivered that bounty to an employee and they fixed it behind my back without compensation or anything we went back and forth for 8 months my @davidbombal interview was supposed to be the day before defcon last year but they patched so much of my work based off my github they learned about from me turning in my bounty that i had to cancel at 1am the day before. Patch notes came out a couple hours later on Aug 8th. Look at the additional security they are finally adding on the right, also my suggestion... 1 of many they have already implemented. notice NONE of my flipper payloads work anymore? you cant use "invoke-restmethod" from the run box anymore lol, My company is called "Unit 259". Thats because the run box has a 259 character limit and i specialize in making malware fit in there, popularizing using "invoke-restmethod" in there. They literally killed my origin story. Even worse, they broke so much i had to cancel my first EVER workshop that was just weeks after that. I had to refund close to $8k. My house is currently in forclosure and that would have changed everything. The workshop was on my birthday too. Remember me disappearing last year around that time? I had to check myself into a hospital. my heart hurts so much. if you dont want to pay the bounty fine, but fuck at this point you owe me a consulting fee man i lost the bounty, lost workshop money, lost personal money, lost thousands of hours of work, basically my will to live and im still fucking broke. i am so fucking lost
1
2
3
598
Got a new blog out today talking about the utility & importance of normalization when detection engineering & hunting. Some cool queries included - check it out! sumologic.com/blog/whats-goi…
1
8
25
2,723
You can use my website to generate a polymorphic reverse shell and store it in a DNS txt record Instead of just using resolve-dns to pull it down and execute it lets abuse google's DoH service so they not only fetch it for us but the traffic is encrypted and proxied
13
99
5
528
54,509
Already started my talk content, been waiting for this news to drop!
It's nearly Easter, that means it's nearly CFP and first ticket drop time. More details to come once we work out the full details. Watch this space!
3
1
11
799