building and breaking @SpecterOps | opinions are my own

/
Joined August 2021
Gavin K retweeted
What happens when Chromium becomes an offensive tool? Our latest SO:Brief features @KingOfTheNOPs and @ScoubiMtl on Silent Chrome, offensive tradecraft, and what it means for defenders. Go deeper with Andrew’s research 👉 ghst.ly/45S1ZgW
3
10
1,128
A quick article showing how the Jev OPSEC ranker works, and looking at how Jev can be used for identifying potentially sensitive file paths and content at speed.
2
78
2
459
27,298
Gavin K retweeted
New Release Havoc Professional 0.8: Leviathan 🩸 - Introducing Kaine User-Defined C2 - Expanded Linux post-ex capabilities - Refactored port forwarding and sleep masking - Enhanced .NET/PowerSafe execution - In-Memory PE Execution and BOF-PE support - HTTP/s Server Name Indication (SNI) Spoofing - License Updates / Air-gapped licensing - Havoc client UI overhaul & cross-platform support Release Link Below🔗
15
42
1
271
12,802
Gavin K retweeted
A fresh new look is coming to Ghostwriter. 👻 v7.3.0 brings a redesigned dashboard, new engagement bar, customizable sidebar, accessibility improvements, and a UI refresh across the application. @cmaddalena unpacks what’s new. 👇 ghst.ly/46xaley
2
9
34
3,695
Gavin K retweeted
Incredible read. Dozens of headline stories packed into a single report. It shows how Claude is being used not just for hacking, but to build missile guidance & drone swarms, biological research, build large scale surveillance systems, run influence ops, etc Even the model theft section is wild. PRC, PLA, & Russian defense agency unknowingly sent sensitive material (even live creds) to Anthropic because Moonshot & DeepSeek were relaying customer traffic into Claude! 😂 This part of Anthropic is far more mature than I think a lot of people give them credit for. I hope they keep publishing these. I don’t think most people are ready for the immediate future.
Anthropic
@AnthropicAISep 10
We're publishing our most detailed threat intelligence report to date. It covers how people tried to misuse Claude—for cyberattacks, influence operations, surveillance, biology, and building weapons—and how we found and stopped them. We disrupted every operation in the report, and used the lessons from them to strengthen our safeguards. Where appropriate, we also shared what we found with authorities and other AI companies. These cases are not typical: we’re highlighting some of the most sophisticated misuse we’ve seen. But they’re especially important to discuss, because they show us where AI misuse is headed, where our safeguards work, and where they need to improve. We’re publishing this report so others can spot the same activity on their own platforms, and so we can give the public a clearer view of how emerging threats develop. Read the report: anthropic.com/threat-intelli…
11
29
4
289
27,956
Gavin K retweeted
I've been teasing this project for a while in the Azure course and I am finally making my Token Analysis and Tracking System (TATS) public. Check out my latest blog to see more and share any cool things you find with TATS! specterops.io/blog/2026/09/0…
6
18
1
57
5,187
Gavin K retweeted
Outflank is proud to have collaborated with @SpecterOps on a new red team AI skills marketplace. This collection packages offensive security knowledge into reusable skills for AI agents. Read more on our blog: outflank.nl/blog/2026/09/02/…
1
32
1
137
7,086
Gavin K retweeted
ServiceNow won't let you query cleartext discovery credentials, not even as admin. @Tw1sm found a way to make the server hand them over anyway, no coercion or relay needed. Works on SSH keys, AWS keys, Entra secrets, and LDAP creds. Check it out ⤵️ ghst.ly/4y37KVo
1
68
188
13,591
Gavin K retweeted
AI coding agents leave a lot behind on endpoints. Consulting Services intern @atomiczsec built Blacklight to show defenders exactly what's exposed and how to monitor it. Covering Claude Code, Codex, Cursor, and Gemini CLI. Check it out! ghst.ly/4g03vT8
2
11
36
3,709
Gavin K retweeted
you might wonder why giving a company access to the world’s smartest, most “cyber-capable” models doesn’t mean they can just pressure-test their own environment, predict what’ll go wrong, and be ready for it. well… :-) security was never just an intelligence problem. you can handpick some of the best engineers in the world and still fail if you put them in a chaotic environment with unclear ownership and bad incentives. that’s why smarter models won’t magically fix defense overnight, while the same models can give attackers an advantage almost immediately. defenders still need lean, empowered teams that can move fast and actually get things done.
4
4
30
2,204
Gavin K retweeted
Happening now! @bagelbyt3s is kicking of his briefing session presenting original research into a new Attack Path technique that results in full WSUS infrastructure takeover. #BHUSA
2
14
1
37
3,818
I might not be attending hacker summer camp, but I still want to contribute to the fun! specterops.io/blog/2026/08/0… Mythic 4.0 enters a public beta today! Also, if you're at BlackHat, be sure to check out @Ne0nd0g 's Arsenal session to see some of these goodies in action :)
2
7
1
12
1,723
Gavin K retweeted
Introducing Tradecraft Academy 📚 Our new on-demand training platform brings the practitioner-led education we are known for to learners anywhere, anytime. Get started with BloodHound Basics today. Read more: ghst.ly/4ywKLmM Start learning: ghst.ly/4wBbZqE
20
3
31
3,884
Gavin K retweeted
Replying to @X
@X @nikitabier @elonmusk I am once again asking you to review your policies and procedures around offensive security research.
10
29
5
139
42,685
Gavin K retweeted
Had a blast talking with @Teach2Breach about offsec topics :D Take a look! Especially enjoyed sharing my experience and the amazing people I learned from.
New full episode of 'whoami' podcast. I had the opportunity to talk with @C5pider , author of Havoc & Havoc Pro. I had a great time learning from one of the best c2/malware devs out there. Check it out for some awesome insights.
4
19
1
139
28,069
Gavin K retweeted
Splunk can be daunting to new detection developers, but when used right its an exceptional tool for detecting adversaries. @sou_predictable's guide covers how to write queries that are fast and efficient to find what you're looking for. Check it out! ⤵️ ghst.ly/4wYHGev
6
12
2,384
Gavin K retweeted
Found a Tailscale API key on an assessment? In their latest research, @KingOfTheNOPs & @Sw4mp_f0x created TailscaleHound to turn your Tailnet into a BloodHound graph to visualize access paths between Azure & Tailscale. Check it out ⤵️ ghst.ly/4nJkgFF
20
56
3,347
If you came to SOCON, you may have seen the fireside chat on Ouroboros (if you weren't too busy counting my "urm"s 😝). The blog post is now live, detailing how we can use Dev-Tunnels for lateral movement, and allow pivoting from GitHub/Entra ID access. specterops.io/blog/2026/05/0…
6
50
4
183
28,041
Gavin K retweeted
keep struggling when things come too easy, you don’t exercise the brain nor the emotions. ease can feel like progress, but it often skips the reps that actually change you. growth is usually a loop, not a straight line – you take passes. you try, you fail, you reframe. you come back with a slightly better model, a slightly calmer nervous system, a slightly wider range of what you can handle. hardship isn’t the goal. but friction is gold. it shows you where your understanding is thin, where your habits are brittle, where your ego is doing the steering. the struggle is the curriculum. agents are making things easier, and that’s good. but don’t confuse speed with depth. use AI to remove busywork, then spend the saved energy on the parts that still hurt a little: the unclear problem, the uncomfortable conversation, the hard tradeoffs, the things you can’t yet explain in words. instead of putting all your wishes into the black box, actually keep thinking, and seeing things fully. keep the difficulty where it matters. outsource the tedious, keep the meaningful resistance. that’s how we keep learning – and how we stay human while your tools get superhuman.
62
262
27
2,212
103,977
This 20-min presentation, "Code as a Medium for Storytelling", is an encapsulation of all my recent thinking on vibe coding as a non-technical person I also showcase 5 projects I built (all of which were viral on X), and 7 lessons on effectively working with coding agents
46
79
16
808
236,762