Creators of BloodHound | Experts in Adversary Tradecraft | Leaders in Identity Attack Path Management
Joined January 2017
- Tweets4.2K
- Following403
- Followers42.4K
- Likes2.3K
SpecterOps retweeted
I will be @BSidesNYC tomorrow at the @SpecterOps booth!
Come talk to us and if you are wearing a #SpecterOps or #BloodHound t-shirt, I might have something special for you (very limited).
See you tomorrow! :)
SpecterOps retweeted
New content for AP:A will be debuting at SpecterBash 🎉 This will be the first time the new Agents and Identities section will be taught as part of the course AND there is a brand new CTF for participants.
See Azure and Entra ID the way attackers do. 👀
During our Azure course at #SpecterBash, learn to identify the misconfigs and attack paths that matter, including those involving agents and identities.
Get the attacker’s perspective: ghst.ly/45COqlF
SpecterOps retweeted
If you've taken my Azure course with @SpecterOps we are inviting alumni back for a new module on Agents and Identity. Join me on Sept 1 to learn about agents and experience our new material before it goes live at SpecterBash. Spots are limited.
events.humanitix.com/adversa…
SpecterOps retweeted
Attack paths are evolving with cloud, agentic AI, and an expanding web of identities and permissions.
Join @JustinKohler10 & me on Aug. 25 for our discussion around what we’re seeing, why AWS is the next frontier for Attack Path Management, and what AI-driven identities mean for defenders.
Join us: ghst.ly/4h0yWPn
SpecterOps retweeted
BloodHound turns 10 🎉
Congrats @_wald0, @CptJesus, @harmj0y
Original pic 👇 taken on @BlackHatEvents #BHUSA arsenal.
SpecterOps retweeted
I can't believe it's already been 10 years, what an insane ride! At this point I'm sure we'll all have BloodHound etched on our tombstones (maybe @_wald0 will have 'Thought in graphs...' 😂) - it truly was an honor working on this project with these two <3
BloodHound is 10 🎉
To celebrate, creators @_wald0, @CptJesus & @harmj0y joined for a special two-part #KnowYourAdversary.
They reminisce on the first attack graphs and look ahead to what’s next for BloodHound.
1️⃣: ghst.ly/4xT4WdA
2️⃣: ghst.ly/4zIIeqj
SpecterOps retweeted
Last week I had a nice chat with @merill, where we discussed my recent #BHUSA talk about passkey security and what it meant for Entra admins.
entra.news/p/pass-the-passke…
SpecterOps retweeted
A full BloodHound-based CTF just for Red Team Village. Hugo van den Toorn is putting your AD attack-path skills to the test, come queue up and hunt for the win. 🐺
SpecterOps retweeted
Quick 'n dirty BloodHound ecosystem overview. The different ingestors, collectors, analysis tools.
There might be things missing.
gist.github.com/gitgotgitgot…
ALT Part of the BloodHound ecosytem overview.
SpecterOps retweeted
LLM security and jailbreak testing gets messy fast.
I built Jailbreaker to make it easier to run and track jailbreak, prompt injection, and agent behavior tests.
Blog - specterops.io/blog/2026/06/2…
Github - github.com/SpecterOps/Jailbr…
Would love to hear what you think.
@SpecterOps
SpecterOps retweeted
New blog post is up looking at how LLMs are making local EDR rulesets, YARA rules, and behavioral detections trivial to extract. This post focuses on how simple the harness can be. Buckle up h4xx0rs, the next few months are gonna get interesting! specterops.io/blog/2026/06/2…
SpecterOps retweeted
Most teams think they have a few attack paths. The real number can run into the billions.
Mark Wilson & Kay Daskalakis from the team behind Bloodhound @SpecterOps spoke to @hashishrajan about identity, agentic AI on old infrastructure, and why speed changes but context doesn't
SpecterOps retweeted
Implementing a 22-step WebAuthn validation flow is hard — even for co-authors of the spec. At #BHUSA, I'll be presenting "Pass-the-Passkey": a new family of attacks bypassing phishing-resistant MFA. Replay. Relay. Tamper. Spoof. 3 new vulns. 20 attacks. 5 OSS tools.
#BHUSA will be here before we know it.
This year our team will share the tradecraft, research, & attack path insights shaping modern offensive & defensive security.
🎓 5 hands-on trainings
🎤 3 technical briefings
🛠️ 5 Arsenal sessions
Learn more: specterops.io/black-hat/
SpecterOps retweeted
Had day one of the Adversary Tactics: Detection (ATD) course yesterday with @SpecterOps. It covered the foundational concepts needed for successful detection engineering and threat hunting programs that detect and find REAL threats
SpecterOps retweeted
Need to boost your exposure management game?
Don’t miss our CEO @HDMoore’s #SOCON2026 talk TODAY at 4:15 PM ET, Relatively Risky: Identifying Exposures at Scale with BloodHound OpenGraph.
Learn how to uncover unusual attack paths & hidden exposures.
specterops.io/so-con/
SpecterOps retweeted
In one week I will be presenting at @SpecterOps SO-CON 2026 about CyberArk PAM. I will share our practical experience and insights on PVWA edge cases and CCP API misconfigurations. #SOCON2026
More information and registration: specterops.io/so-con/
SpecterOps retweeted
[LIVE WEBINAR] We're a hosting a session on identity attack paths w/@Cisco and @SpecterOps.
• Why AD/Entra ID attack paths work
• Choke point remediation
• Privilege Zones for hybrid environments
Join LIVE on Jan 22 → na2.hubs.ly/H02WSgP0
SpecterOps retweeted
At Ping, innovation means continuously improving our products to deliver the best tools and strongest cybersecurity. That’s why we partnered with @SpecterOps to launch PingOneHound.
🎧 Learn about how it came together on the Know Your Adversary Podcast: ow.ly/Gmg050XNfTP
SpecterOps retweeted
Just in time for the holidays, I wanted to share something that a lot of people have asked for: youtube.com/playlist?list=PL…
Short videos about Mythic development and customizations. This is just the start - I'll release a survey soon that'll get feedback for the next batch :)