More Offensive Than Ever #PenTest | #PurpleTeam | #RedTeam | #ExploitDev Training, Certification, and Research
The Internet
Joined October 2010
- Tweets19.3K
- Following578
- Followers74.9K
- Likes12.2K
Eight categories, and your vote picks the community's choice in each.
The 2026 SANS Difference Makers Awards celebrate practitioners, projects, and organizations. Which category do you know best? Voting closes Nov 9.
Cast your vote: feedback.sans.org/733559
The way attackers get in has shifted, and credential theft is no longer leading the pack.
Phishing and exploited vulnerabilities are closing the gap fast, and most defensive strategies haven’t caught up yet.
What’s the #1 way in today?
12%Stolen credentials
65%Phishing
24%Exploited vulnerabilities
0%Other
17 votes • 1 days📺 Now OnDemand: IoT and Wireless Penetration Testing: What’s New in SEC556 and SEC617.
Watch James Leyte-Vidal and Larry Pesce compare the two courses and cover new AI-assisted workflows, hardware kits, labs, and platform support.
🔗 buff.ly/cmxuKwn
Not every redirector strategy fits every operation.
This session compares different approaches, where they fit within an engagement, and the operational tradeoffs Red Teams should consider when designing more resilient C2 infrastructure.
🔗 buff.ly/2paq1Qn
🚨 LIVE in 1 hour.
See what’s new in SEC556 and SEC617, including AI-assisted analysis, updated labs, revised hardware kits, and the testing targets that separate IoT from wireless penetration testing.
📅 Oct 20 | 12:00 PM ET
🔗 buff.ly/cmxuKwn
Tomorrow: IoT or wireless? Know the difference.
James Leyte-Vidal and Larry Pesce will compare SEC556 and SEC617 while covering new labs, AI-assisted workflows, hardware kits, and host-platform support.
🔗 buff.ly/cmxuKwn
💜 🗞️ In this episode of The Weekly #PurpleTeam, @BRIPWN covers DLL sideloading using an Adaptix Beacon payload hidden inside python315.dll, a technique attackers use to execute malicious code under the cover of a legitimate, signed process.
👉️ buff.ly/zd8w8bl
Connected devices demand a different testing approach than wireless environments. James Leyte-Vidal and Larry Pesce will break down where SEC556 and SEC617 differ so practitioners can match the training to their targets and responsibilities.
🔗 buff.ly/cmxuKwn
Attackers are abusing vulnerable Windows kernel drivers to disable EDR, while #Microsoft is tightening driver security.
SEC665 teaches #RedTeam operators to investigate kernel internals and understand how security products monitor activity.
💻️ buff.ly/D10ovhr
Your C2 server should not be so easy to find.
David Mayer will show how redirectors add separation between operators and backend infrastructure, helping Red Teams control how traffic reaches C2 while reducing unnecessary exposure.
🔗 buff.ly/2paq1Qn
Give an AI agent a codebase, and you'll get answers.
Give it the right context, tools, and constraints, and you'll get something worth investigating.
#SEC543 teaches you how to configure and guide AI coding agents for penetration testing.
Learn more: buff.ly/p8VRFxz
#SEC660 now incorporates AI into exploit research, vulnerability analysis, scripting, and bug discovery while preserving the technical depth needed to validate findings and understand what actually works.
🐍 Watch “Exploiting the Network” here: buff.ly/J8s6et3
This session will cover the new AI-assisted analysis workflows, revised hardware kits, updated hands-on labs, and expanded host-platform support across SEC556 and SEC617.
📅 Oct 20 | 12:00 PM ET
🔗 buff.ly/IkzdBoC
#SEC556 #SEC617 #PenTesting #OffensiveSecurity
IoT and wireless testing may overlap, but they are not the same job.
James Leyte-Vidal and Larry Pesce will compare SEC556 and SEC617, from hardware, firmware, APIs, and network traffic to Wi-Fi, Bluetooth, RFID, NFC, and software-defined radio.
🔗 buff.ly/cmxuKwn
💜 🗞️ An object deleted in AD doesn't vanish immediately. In this episode of The Weekly #PurpleTeam, Brian Almond covers a lesser-known Active Directory persistence and privilege escalation technique: reanimating tombstoned objects using NetExec.
🪦 Watch: buff.ly/tK3ghrM
Environments are built on trust, and adversaries spend their time looking for ways to abuse it. The updated #SEC565 explores how access expands, trust is exploited, and defensive assumptions are tested through realistic adversary emulation.
🐉 Register: go.sans.org/uMFjWn
Attack with AI and attack AI itself.
SEC537 brings Offensive AI + Adversarial AI into one 6-day learning path, combining SEC535 and SEC536 for practitioners who want both disciplines.
🤼: go.sans.org/PHMEA7
Learn more about the details here: go.sans.org/Ru5FXT