Tagged
Tooling
Two DGX Sparks, 33 Local Models, One Question: Can Local AI Actually Red Team?
TL;DR: I built a two-node NVIDIA DGX Spark cluster and benchmarked 33 local, open-weight models for real red-team work: BloodHound attack-path analysis, …
ghosttype - finding secrets in AI conversation history
I found it by accident. I was looking for an old conversation with Claude. Searching through history, trying to recover context I had thrown away too quickly. …
Log4j - where there is a fire, bring a hose
When there is a fire, you bring a hose of water, not a can of gasoline. When log4j started, one of the main challenges for organization was to identify which …
Get busy phishing, or get busy paying - Microsoft community meetup
I’ve had the pleasure to present in a recent Microsoft Community virtual meetup about how I believe an organization should perform phishing campaign using a …
ADFSpray - when you need to make your own tools
TL;DR - new tool! ADFSpray I’ve needed to perform a password spraying attack against a Microsoft resource. I’ve looked online and found various tools that …
Meet Caldera - Microsoft community meetup
This time, I’ve made sure to upload the deck as soon as possible. I’ve had the pleasure to present in a recent Microsoft Community meetup about providing …
Introducing: Disruption - automated AD-based environment deployment
Recently I’ve had the need to spin up AD domain-based environment to test stuff. Sometimes it’s specific tools, bypasses, or how configuration change affects …