More Offensive Than Ever #PenTest | #PurpleTeam | #RedTeam | #ExploitDev Training, Certification, and Research
The Internet
Joined October 2010
- Tweets19.3K
- Following578
- Followers74.9K
- Likes12.2K
The way attackers get in has shifted, and credential theft is no longer leading the pack.
Phishing and exploited vulnerabilities are closing the gap fast, and most defensive strategies haven’t caught up yet.
What’s the #1 way in today?
12%Stolen credentials
62%Phishing
25%Exploited vulnerabilities
0%Other
16 votes • 3 days📺 Now OnDemand: IoT and Wireless Penetration Testing: What’s New in SEC556 and SEC617.
Watch James Leyte-Vidal and Larry Pesce compare the two courses and cover new AI-assisted workflows, hardware kits, labs, and platform support.
🔗 buff.ly/cmxuKwn
Not every redirector strategy fits every operation.
This session compares different approaches, where they fit within an engagement, and the operational tradeoffs Red Teams should consider when designing more resilient C2 infrastructure.
🔗 buff.ly/2paq1Qn
🚨 LIVE in 1 hour.
See what’s new in SEC556 and SEC617, including AI-assisted analysis, updated labs, revised hardware kits, and the testing targets that separate IoT from wireless penetration testing.
📅 Oct 20 | 12:00 PM ET
🔗 buff.ly/cmxuKwn
Tomorrow: IoT or wireless? Know the difference.
James Leyte-Vidal and Larry Pesce will compare SEC556 and SEC617 while covering new labs, AI-assisted workflows, hardware kits, and host-platform support.
🔗 buff.ly/cmxuKwn
💜 🗞️ In this episode of The Weekly #PurpleTeam, @BRIPWN covers DLL sideloading using an Adaptix Beacon payload hidden inside python315.dll, a technique attackers use to execute malicious code under the cover of a legitimate, signed process.
👉️ buff.ly/zd8w8bl
Connected devices demand a different testing approach than wireless environments. James Leyte-Vidal and Larry Pesce will break down where SEC556 and SEC617 differ so practitioners can match the training to their targets and responsibilities.
🔗 buff.ly/cmxuKwn
Attackers are abusing vulnerable Windows kernel drivers to disable EDR, while #Microsoft is tightening driver security.
SEC665 teaches #RedTeam operators to investigate kernel internals and understand how security products monitor activity.
💻️ buff.ly/D10ovhr
Your C2 server should not be so easy to find.
David Mayer will show how redirectors add separation between operators and backend infrastructure, helping Red Teams control how traffic reaches C2 while reducing unnecessary exposure.
🔗 buff.ly/2paq1Qn
Give an AI agent a codebase, and you'll get answers.
Give it the right context, tools, and constraints, and you'll get something worth investigating.
#SEC543 teaches you how to configure and guide AI coding agents for penetration testing.
Learn more: buff.ly/p8VRFxz
#SEC660 now incorporates AI into exploit research, vulnerability analysis, scripting, and bug discovery while preserving the technical depth needed to validate findings and understand what actually works.
🐍 Watch “Exploiting the Network” here: buff.ly/J8s6et3
This session will cover the new AI-assisted analysis workflows, revised hardware kits, updated hands-on labs, and expanded host-platform support across SEC556 and SEC617.
📅 Oct 20 | 12:00 PM ET
🔗 buff.ly/IkzdBoC
#SEC556 #SEC617 #PenTesting #OffensiveSecurity
IoT and wireless testing may overlap, but they are not the same job.
James Leyte-Vidal and Larry Pesce will compare SEC556 and SEC617, from hardware, firmware, APIs, and network traffic to Wi-Fi, Bluetooth, RFID, NFC, and software-defined radio.
🔗 buff.ly/cmxuKwn
💜 🗞️ An object deleted in AD doesn't vanish immediately. In this episode of The Weekly #PurpleTeam, Brian Almond covers a lesser-known Active Directory persistence and privilege escalation technique: reanimating tombstoned objects using NetExec.
🪦 Watch: buff.ly/tK3ghrM
Environments are built on trust, and adversaries spend their time looking for ways to abuse it. The updated #SEC565 explores how access expands, trust is exploited, and defensive assumptions are tested through realistic adversary emulation.
🐉 Register: go.sans.org/uMFjWn
Attack with AI and attack AI itself.
SEC537 brings Offensive AI + Adversarial AI into one 6-day learning path, combining SEC535 and SEC536 for practitioners who want both disciplines.
🤼: go.sans.org/PHMEA7
Learn more about the details here: go.sans.org/Ru5FXT
The updated #SEC617 is officially live!
Wi-Fi client coverage now includes Windows 11, giving practitioners current techniques for assessing how modern endpoints discover, select, and connect to wireless networks.
🛜 Read more: buff.ly/Dq0JJEk
#PenetrationTesting
