Garrett

If you're at Blackhat USA next month, I'm giving a talk on the Wednesday. Currently working on the presentation and attempting to avoid other rabbit holes until it's done! Excited to talk about this 😈 #BHUSA #beam-me-up-luke-a-review-of-teleport-attack-scenarios-52645" target="_blank" rel="nofollow noopener">blackhat.com/us-26/briefing…

[TALK] My latest Black Hat Europe talk is now publicly available. If you can look past the painfully obvious anxiety and a speaker who occasionally sounds like his brain has stopped cooperating, you might find something useful. Who knows? youtube.com/watch?v=tOVcSc…

Took some time this morning to revisit an old project, happy to share it. Scheme Hunter - WDAC / AppLocker Bypass Recon Scripts - URI and LOL Primitives Schemes have all kinds of neat execution. tricks. gist.github.com/AlloySecureGro… 1/n

Planning to cover abuse cases relevant to initial access, post-exploitation techniques, lateral movement, and privilege escalation in this one. I'll be talking at the speed of a professional auctioneer to cover all of it. Come through if you're in Vegas this year!

@_dirkjan @WEareTROOPERS @kfosaaen @sapirxfed @Thomas_Live @DrAzureAD @ericonidentity @4ndr3w6S @JsQForKnowledge @thomas_elling

Identity round table at @WEareTROOPERS with @kfosaaen @sapirxfed @Thomas_Live @DrAzureAD @ericonidentity @4ndr3w6S @JsQForKnowledge @thomas_elling

What happens when a new Mythic agent can be generated, tested, and deployed in ~2 hours? @_xpn_ explores "disposable tooling" and the implications for offensive operations and defenders alike. Check out the latest from GhostWorks ⬇️ ghst.ly/4oMyrdC

@0xBoku @ConsciousHacker its a trap

@ConsciousHacker Too scared lol

MMO peaked with classic

fable is a joke wtf

And don't get me started on the shit-hole that is LinkedIn... Its always been bad but since marketing departments were given ChatGPT subscriptions, hol-eeeee-fuk!

I'm excited to be able to finally publish the public disclosure for CVE-2026-4387. Check out my blog on discovering the reuse of the state.kv file to get authenticated sessions with StrongDM (now fixed). specterops.io/blog/2026/06/0…

I guess it's dunk on MSRC day lol

Phishing sandboxes don’t play fair. In his latest blog, @synzack21 walks through a real red team engagement against modern email sandboxes and techniques that helped keep payload redirects hidden from crawlers while preserving a familiar user experience. ghst.ly/3RDFWac

@_xpn_ @curi0usJack man I just want a new GPU without having to sell a kidney

@curi0usJack Agreed! Basically the end of the hype cycle and when the grownups get invited back to the table is my take on the pop. Every time I see an article like ^^, I also see a load of comments rubbing their hands as though AI will die and everything goes back to pre-LLM days

Wait, when people say they are waiting for the AI bubble to pop, they don’t think that LLMs are actually going away do they? Like, yes, companies will go bust, but people do realise that the actual LLM shit isn’t going anywhere right?? RIGHT??!!

@_xpn_ @Emma_Chester Happy birthday!!

Huge Happy 40th to my wife and partner in crime @Emma_Chester. It’s easy to forget that the fun we get to have on the trips, hackathons, publications and research is often supported by someone who looks after the kids during the weeks of travel, listens during the late night rants, is there fighting for you during the dark moments, pushes you to try for job positions you don’t feel you are good enough for (and to drop the things that will likely end up with many of us in prison 🤣), brings us snack and drinks while we hack on whatever we are obsessed with that week. She is that person for me, and none of what I’ve done publicly and overcome privately would be possible with out her ❤️ Happy Birthday Emm!!

It will be huge! – (mostly) full @WEareTROOPERS #TROOPERS26 agenda published: #agenda-day--2026-06-24" target="_blank" rel="nofollow noopener">troopers.de/troopers26/age… #agenda-day--2026-06-25" target="_blank" rel="nofollow noopener">troopers.de/troopers26/age…

👀👀

Launching a WSL process from a Windows process with WslLaunch trainsec.net/library/window…

NTLMv1 is still out there. And now it’s easier than ever to break. @skylerknecht walks through how Google’s rainbow tables make NT hash recovery practical, no third-party service required. Check it out! ⤵️ ghst.ly/4vqx9Id

A debate in the BloodHound Slack: can you attribute the originating host from an ADWS query? 🤨 Challenge accepted. Part 5B continues the ADWS blind spot: Event 5156 recovers the attacker’s real IP in ~60ms. 🕵️ Check out my latest post… huntress.com/blog/ldap-acti…