2023 BH Subscribe

Penetration Testing, Black Hat

Go Hack Yourself: War Stories from ~20k Pentests with NodeZero – Snehal Antani – BH23 #2

August 10, 2023

In this session, Snehal will discuss several real-world examples of what autonomous pentesting discovered in networks just like yours. You’ll hear more about how fast and easy it was to safely compromise some of the biggest (and smallest) networks in the world - with full domain takeover in a little more than a few hours. Learn how you can safely do the same in your own network today!

Segment Resources:

War Stories from 15K Pentests: With Log4shell, Vulnerable ≠ Exploitable

This segment is sponsored by Horizon3.ai. Visit https://securityweekly.com/horizon3aibh to learn more about them!

Sponsored By

Horizon3.ai

Full episode and show notes

Guest

CEO and Co-Founder at Horizon3.ai

Snehal Antani is co-founder and CEO of Horizon3.ai. Prior to Horizon3.ai, he was CTO of Joint Special Operations Command (JSOC), CTO of Splunk, and a CIO within GE Capital. Antani holds 18 patents granted by the USPTO in data processing, cloud computing, and virtualization. He regularly participates in keynote speeches and often writes articles on leadership, innovation, digital transformation, data security, and cloud security.

Host

Sr. InfoSec Consultant at Online Business Sytems

https://www.obsglobal.com/

Related

Vulnerability Management

Bug bounties, vulnerability disclosure, PTaaS, fractional pentesting – Grant McCracken – ASW #306

November 4, 2024

After spending a decade working for appsec vendors, Grant McKracken wanted to give something back. He saw a gap in the market for free or low-cost services for smaller organizations that have real appsec needs, but not a lot of means to pay for it. He founded DarkHorse, who offers VDPs and bug bounties to organizations of all sizes for free, or for...

Cybersecurity Career Paths: from touring musician to purple teaming at Meta – Jayson Grace – ESW #378

October 3, 2024

Our latest in a series of interviews discussing cybersecurity career paths, today we talk to Jayson Grace his path into cybersecurity and his experience building red teams at national labs and purple teams at Meta. We also talk about his community impact, giving talks and building open source tools. Jayson just left Meta for an AI safety startup na...

AI Red Teaming and AI Safety – Amanda Minnich – ESW #371

August 8, 2024

In this interview we explore the new and sometimes strange world of redteaming AI. I have SO many questions, like what is AI safety? We'll discuss her presence at Black Hat, where she delivered two days of training and participated on an AI safety panel. We'll also discuss the process of pentesting an AI. Will pentesters just have giant cheatshe...