Katie Paxton-Fear

Find me on the internet Mastodon: @insiderphd" target="_blank" rel="nofollow noopener">infosec.exchange/@insiderphd YouTube: @InsiderPhD" target="_blank" rel="nofollow noopener">youtube.com/@InsiderPhD Newsletter: insiderphd.substack.com Discord: InsiderPhD Bluesky: bsky.app/profile/inside… LinkedIn: linkedin.com/in/katiepf

@syntaxish So long as they are footing the bill 😎

@InsiderPhD A manager is going to look at this and tell their employees this is their roadmap....

Resources like this are super helpful but man does it show how ridiculous infosec certs have gotten 350 certs from almost 60 vendors many over $1,000 dragkob.com/security-certi…

Seems that wp2shell PoCs are now floating around the internet, so we've published our blog post including our research methodology for finding the bug as well as a deep dive into the chain itself - slcyber.io/research-cente…

@0mafan Ngl James Bond seems like a pretty shit spy to me he gets caught constantly nepo baby hire for sure

@InsiderPhD “James Bond would have been a better spy if he had boobs” But seriously, she got a point there

Apparently there is someone speaking at EMF called Katie PF this is not me idk who this is I am at home writing FIRMWARE FOR MY E-READER sorry if anyone was looking for me 😭😭😭

Here’s how that is going by the way

@DennisF It is a Toyota BB Open Deck! It’s a version of the bB or (scion xB) that Toyota made from 2001-2003!

@InsiderPhD What is that thing?? It looks rad

I did in fact buy the weird small pick up truck 😂 I’m going to get it on Thursday! Am I little disappointed it’s not yellow on the outside ngl yes but you can always change the colour of cars anyway

@3907_bh I think the problem is people seem to be very keen on replacing their brain with AI and doing the bare minimum rather than using AI like an intern and using their brain

@InsiderPhD Same. I use it for passive recon, triage/validation, and report writing now. I still pull a face seeing people use it entirely instead of their brain, but thats obviously valid

Interested in how I went from AI skeptic to maybe seeing the value in AI sometimes for hacking? I'm going to be doing a talk at CyberLabCon in 40mins! Live AND free on YouTube :)

@5110r3dh4wk I love the derailing for this car 😂 IT DESERVES MORE WIDE RECOGNITION

@InsiderPhD Had to call it out in the conference 😝 congrats 👏🏻

After previously enduring the pain of peeling off all my hacker stickers when I had to upgrade my corp laptop, I decided to adopt @InsiderPhD’s tip of using laptop covers. Makes it easy to upgrade and you get to display them 👍

@seclilc Hell yeah art is awesome 🔥🔥🔥

@InsiderPhD I love seeing this process. makes me want to get creative :)

Sneak peak of my DEFCON sticker concept this year

@chrisbward Procreate! I use this brush set crom.ink/shop/p/crom-br…

@InsiderPhD dope! and we need to hate github and npm supplychains more :) what's the name of the sketching app?

Link: youtube.com/live/u50TJuY21…

@foilmanhacks @semgrep For small teams with only a few projects it’s free ;) semgrep.dev/pricing/

@InsiderPhD @semgrep Hell Yes. (If you gimme a free sub, Trufflehog has fallen at the way side as of late) :P (i'd watch regardless)

I have learned a lot about hacking from static analysis since being at @semgrep I reproduced the SQL injection in wp2shell 🫡

Also slack reminded me I've now been at Semgrep a full year, wow time flies

@st0pw4r @semgrep Most CVEs aren't accepted by most BB programs until they're at least 30days old anyway, this was just for fun :D

@InsiderPhD @semgrep The next step - bypass the WAF))) Already block the regular payload on the most BB targets