HackTheBox – Active Subdomain Enumeration

Some background information, feel free to skip: I’m relatively new to pentesting. I’ve spent my whole career on the blue side, mostly with SIEM technologies. But that’s boring! I want to HACK! So my employer paid for some training and set a goal to finish HackTheBox Bug Bounty course and all TryHackMe modules this year. So I’m documenting my progress,…

The Future of IT With AI

People ask what the future of programming (and other IT tasks) looks like with tools like Chat-GPT and Github Copilot. My take: AI is basically a summer intern. Horse Whips and Buggy Factories The trajectory of technology is always Manual effort -> Partial automation -> Full automation -> New careers built babysitting the automation. Information was remembered and only communicated…

You’re probably not doing DevSecOps so stop saying you are

I was a security consultant for 6 years, and I’ve been working in security for 10 years and if there’s one thing I’ve learned its this: IT and the rest of the business really doesn’t like or even understand security. We get in their way and we demand things of them that only help us, and the business never sees…