The InfoSec & OSINT Show

Latest Episodes:

50 - pdp (Petko Petkov) & Automating Pownage with PownJS Mar 25, 2021

Show notes

This week pdp hangs out to chat about PownJS, SecApps, recon tool orchestration and tool development. My 3 main takeaways were 1) how to integrate PownJS into your recon process 2) his recon workflow and 3) Why JavaScript is a great language for quick PoC development

For more information, including the show notes check out https://breachsense.io/podcast

49 - Gabrielle Botbol & Becoming a Pen Tester Mar 18, 2021

Show notes

This week Gabrielle Botbol joins the show to talk about getting into the world of pen testing, certs, CTFs, self study resources, report writing, repeatable risk scoring, finding XSS and staying current. My 3 main takeaways were 1) the CTFs you should be practicing on 2) some strategies to gain credibility in the industry and 3) which certs are worth the investment

For more information, including the show notes check out https://breachsense.io/podcast

48 - Paulino Calderón & Practical IoT Hacking Mar 11, 2021

Show notes

This week Paulino Calderón joins the show to chat about his methodology for finding bugs in IoT devices, using Lua for quick exploit development, alarming vulnerabilities he found in a smart water bottle, extending Nmap's functionality and his tips for starting a security business.

For more information, including the show notes check out https://breachsense.io/podcast

47 - Christian Folini & The Core Rule Set Mar 04, 2021

Show notes

This week Christian Folini hangs out to talk about protecting web apps with the OWASP Core Rule Set, getting into the security industry, impedance mismatch and anomaly scoring. My 3 main takeaways were 1) how RASPs compare to WAFs 2) how paranoia levels are used to eliminate false positives and 3) how the Swiss Post used the CRS to protect a vulnerable online voting system

For more information, including the show notes check out https://breachsense.io/podcast

46 - InfoSec News & Analysis Feb 25, 2021

Show notes

This week we change things up a bit and review a curated (almost) 5 minute summary of the latest InfoSec news including SolarWinds sanctions, language supply chain attacks, Egregor ransomware as a service, N.Korean crypto theft, vuln exploitation in the wild, Mexican politicians and ATM skimming, a new password manager, legal use of look-alike domains, rogue Yandex employees and SIM swapping attacks.

For more information, including the show notes check out https://breachsense.io/podcast

45 - John Hammond & Hacking CTFs Feb 18, 2021

Show notes

This week John Hammond joins the show to talk about hacking with Python, certs vs degrees, avoiding rabbit holes and the differences between various flavors of CTFs. My 3 main takeaways were 1) how to get started with capture the flag competitions 2) dealing with burnout and 3) his methodology to analyze malware

For more information, including the show notes check out https://breachsense.io/podcast

44 - Ted Harrington & Doing Application Security Right Feb 11, 2021

Show notes

This week Ted Harrington hangs out to talk about hacking passive medical devices, predicting Ethereum private keys and exploiting business logic flaws. My 3 main takeaways were 1) Ted's 6 fundamentals of security testing 2) How do to threat modelling right and 3) His advice for starting a security company

For more information, including the show notes check out https://breachsense.io/podcast

43 - Robert "RSnake" Hansen & The Future of Data Privacy Feb 04, 2021

Show notes

This week Robert Hansen joins us to talk about privacy as a service, search engine and VPN privacy, the future of cyber-insurance, asset discovery, hackers.org and some tips on starting a security business. My 3 main takeaways were 1) the future of data privacy 2) How he used snapshots of the internet to predict stock prices and 3) what security controls he would do differently if he ran hackers.org today

For more information, including the show notes check out https://breachsense.io/podcast

42 - Charles Shirer & Pen Testing with No Money Down Jan 28, 2021

Show notes

This week Charles Shirer joins us to talk about pen testing, OSINT and how he got started in security. My 3 main takeaways were 1) when to use SecBSD as an alternative to Kali 2) How to approach pen testing APIs as opposed to web apps and 3) some tactical tips on maintaining your mental health when dealing with the pressures of InfoSec

For more information, including the show notes check out https://breachsense.io/podcast

41 - Chris Hadnagy & Human Hacking Jan 21, 2021

Show notes

This week Chris Hadnagy joins us to talk about the psychology behind social engineering, choosing effective pretexts, as well as the science behind how we make decisions. My 3 main takeaways were 1) how to identify personality types and communicate effectively using DISC 2) how Oxytocin and Amygdala hijacking influence our behavior and 3) How to get started in a career as a social engineer

For more information, including the show notes check out https://breachsense.io/podcast

Our TOPPODCAST Picks

Follow Us

Stay Connected

Related Podcasts

Links

Stay Connected