I'm thrilled to announce "HTTP/1 Must Die! The Desync Endgame", at #BHUSA! This is going to be epic, check out the abstract for a teaser ↓
May 14, 2025 at 1:31 PM
I'm thrilled to announce "HTTP/1 Must Die! The Desync Endgame", at #BHUSA! This is going to be epic, check out the abstract for a teaser ↓
I just had the most insightful conversation on AI ethics I’ll likely have this week with my Uber driver going from BSidesLV to BHUSA
August 4, 2025 at 11:40 PM
I just had the most insightful conversation on AI ethics I’ll likely have this week with my Uber driver going from BSidesLV to BHUSA
Project Glasswing/Mythos threaded the needle in releasing both after RSAC and after the BHUSA 2026 CFP closed but before the codebase/model leaked (at least publicly)
April 10, 2026 at 6:42 PM
Project Glasswing/Mythos threaded the needle in releasing both after RSAC and after the BHUSA 2026 CFP closed but before the codebase/model leaked (at least publicly)
My tendency to go all-in can harm work/life balance. To help, I counterweight work goals with unrelated but challenging personal goals. For 2025:
- Complete my research on *redacted* with high impact case studies and present it at BHUSA
- Perform a triple-bodyweight deadlift 😬
- Complete my research on *redacted* with high impact case studies and present it at BHUSA
- Perform a triple-bodyweight deadlift 😬
December 31, 2024 at 1:03 PM
My tendency to go all-in can harm work/life balance. To help, I counterweight work goals with unrelated but challenging personal goals. For 2025:
- Complete my research on *redacted* with high impact case studies and present it at BHUSA
- Perform a triple-bodyweight deadlift 😬
- Complete my research on *redacted* with high impact case studies and present it at BHUSA
- Perform a triple-bodyweight deadlift 😬
Beyond hyped to be presenting with @anam0x.bsky.social and the rest of my team at Arsenal at BHUSA 2025! app.ingo.me/q/0x9xn
Black Hat USA 2025
app.ingo.me
May 20, 2025 at 4:14 PM
Beyond hyped to be presenting with @anam0x.bsky.social and the rest of my team at Arsenal at BHUSA 2025! app.ingo.me/q/0x9xn
And see you next week in Vegas if you're going to BHUSA/DEFCON/BSidesLV, etc.
July 28, 2025 at 6:27 AM
And see you next week in Vegas if you're going to BHUSA/DEFCON/BSidesLV, etc.
I'm an elder millennial and I approve of this message.
(Also, hope to make it to Defcon next year, given I finally managed BHUSA this year!)
(Also, hope to make it to Defcon next year, given I finally managed BHUSA this year!)
December 15, 2024 at 12:46 AM
I'm an elder millennial and I approve of this message.
(Also, hope to make it to Defcon next year, given I finally managed BHUSA this year!)
(Also, hope to make it to Defcon next year, given I finally managed BHUSA this year!)
Hanging out with the Detections.ai folks in the Startup City at BHUSA - reminder if you swing by and register for their detection dev platform you’ll get a chance to take my CTI+DE&TH course free!
August 6, 2025 at 8:22 PM
Hanging out with the Detections.ai folks in the Startup City at BHUSA - reminder if you swing by and register for their detection dev platform you’ll get a chance to take my CTI+DE&TH course free!
During my #BHUSA talk I've released many ETW research tools, of which the most notable is BamboozlEDR. This tool allows you to inject events into ETW, allowing you to generate fake alerts and blind EDRs.
github.com/olafhartong/...
Slides available here:
github.com/olafhartong/...
github.com/olafhartong/...
Slides available here:
github.com/olafhartong/...
GitHub - olafhartong/BamboozlEDR: A comprehensive ETW (Event Tracing for Windows) event generation tool designed for testing and research purposes.
A comprehensive ETW (Event Tracing for Windows) event generation tool designed for testing and research purposes. - olafhartong/BamboozlEDR
github.com
August 6, 2025 at 8:49 PM
During my #BHUSA talk I've released many ETW research tools, of which the most notable is BamboozlEDR. This tool allows you to inject events into ETW, allowing you to generate fake alerts and blind EDRs.
github.com/olafhartong/...
Slides available here:
github.com/olafhartong/...
github.com/olafhartong/...
Slides available here:
github.com/olafhartong/...
That's a wrap on our Azure Intrusion for Red Teamers training at #BHUSA! 4 intense days from zero to Global Admin via Entra ID, M365, resources, DevOps, Intune & more 🔥 Huge thanks to all our participants and next stop: #HEXACON2025, Paris, Oct 6 🇫🇷
August 7, 2025 at 10:26 AM
That's a wrap on our Azure Intrusion for Red Teamers training at #BHUSA! 4 intense days from zero to Global Admin via Entra ID, M365, resources, DevOps, Intune & more 🔥 Huge thanks to all our participants and next stop: #HEXACON2025, Paris, Oct 6 🇫🇷
#RSAC thought: all that cheap plastic vendor shit that gets passed out in the Expo Hall? Probably 99%+ made in PRC. I wonder what vendor swag is going to look like at BHUSA if the Trump Tax/Tariff continues.
April 29, 2025 at 10:43 PM
#RSAC thought: all that cheap plastic vendor shit that gets passed out in the Expo Hall? Probably 99%+ made in PRC. I wonder what vendor swag is going to look like at BHUSA if the Trump Tax/Tariff continues.
Here’s my latest video. 😁
And here are the links. 😊
Hope to see you there.
tinyurl.com/3tk8b3rh
#BHUSA
tinyurl.com/y6zfn6w6
#defcon #defcontraining
And here are the links. 😊
Hope to see you there.
tinyurl.com/3tk8b3rh
#BHUSA
tinyurl.com/y6zfn6w6
#defcon #defcontraining
July 14, 2025 at 6:59 PM
Here’s my latest video. 😁
And here are the links. 😊
Hope to see you there.
tinyurl.com/3tk8b3rh
#BHUSA
tinyurl.com/y6zfn6w6
#defcon #defcontraining
And here are the links. 😊
Hope to see you there.
tinyurl.com/3tk8b3rh
#BHUSA
tinyurl.com/y6zfn6w6
#defcon #defcontraining
🤔 Curious who made your most beloved open-source tools?
From BloodHound and Mythic to Ghostwriter and more, meet our team at Booth 4527 during #BHUSA!
Schedule a conversation ➡️ ghst.ly/bhusa-25
From BloodHound and Mythic to Ghostwriter and more, meet our team at Booth 4527 during #BHUSA!
Schedule a conversation ➡️ ghst.ly/bhusa-25
July 10, 2025 at 10:10 PM
🤔 Curious who made your most beloved open-source tools?
From BloodHound and Mythic to Ghostwriter and more, meet our team at Booth 4527 during #BHUSA!
Schedule a conversation ➡️ ghst.ly/bhusa-25
From BloodHound and Mythic to Ghostwriter and more, meet our team at Booth 4527 during #BHUSA!
Schedule a conversation ➡️ ghst.ly/bhusa-25
If you're at Blackhat USA next month, I'm giving a talk on the Wednesday. Currently working on the presentation and attempting to avoid other rabbit holes until it's done! Excited to talk about this 😈 #BHUSA blackhat.com/us-26/briefi...
July 14, 2026 at 10:49 AM
If you're at Blackhat USA next month, I'm giving a talk on the Wednesday. Currently working on the presentation and attempting to avoid other rabbit holes until it's done! Excited to talk about this 😈 #BHUSA blackhat.com/us-26/briefi...
🚨 Still a few days to register for our Azure Intrusion for Red Teamers training at #BHUSA! Very hands-on, full kill chain from zero to Global Admin with stealth in mind. Secure your seat now! www.blackhat.com/us-25/traini...
July 2, 2025 at 9:27 AM
🚨 Still a few days to register for our Azure Intrusion for Red Teamers training at #BHUSA! Very hands-on, full kill chain from zero to Global Admin with stealth in mind. Secure your seat now! www.blackhat.com/us-25/traini...
Slides from @olafhartong.nl's talk at #bhusa (I’m in your logs now, deceiving your analysts and blinding your EDR) are available now: i.blackhat.com/BH-USA-25/Pr...
August 29, 2025 at 8:37 AM
Slides from @olafhartong.nl's talk at #bhusa (I’m in your logs now, deceiving your analysts and blinding your EDR) are available now: i.blackhat.com/BH-USA-25/Pr...
Completely flabbergasted... but over the moon to announce with @turtlesec.io that "CRLF-Powered Desync Attacks: Beheading HTTP Streams" is coming to #BHUSA @blackhatevents.bsky.social
May 19, 2026 at 7:24 AM
Completely flabbergasted... but over the moon to announce with @turtlesec.io that "CRLF-Powered Desync Attacks: Beheading HTTP Streams" is coming to #BHUSA @blackhatevents.bsky.social
I just did an interview with @mutantzombie.bsky.social with teasers for my upcoming #BHUSA presentation "Can AI Do Novel Vulnerability Research: Meet the HTTP Terminator", plus reflections on the Top Ten Web Hacking Techniques of 2025 & 2026. Watch it here:
www.youtube.com/watch?v=fOWh...
www.youtube.com/watch?v=fOWh...
Top 10 Web Hacking Techniques of 2025 and a Hint for 2026 - James Kettle - ASW #380
YouTube video by Security Weekly - A CRA Resource
www.youtube.com
April 28, 2026 at 2:46 PM
I just did an interview with @mutantzombie.bsky.social with teasers for my upcoming #BHUSA presentation "Can AI Do Novel Vulnerability Research: Meet the HTTP Terminator", plus reflections on the Top Ten Web Hacking Techniques of 2025 & 2026. Watch it here:
www.youtube.com/watch?v=fOWh...
www.youtube.com/watch?v=fOWh...
Kyle and Justin are on the yellow sofa discussing #SWARM, our upcoming builder event at #BHUSA.
🔹 Build #opensource #AI agents, skill files & MCP servers.
🔹 Join solo or in teams of up to 3.
🔹 Find teammates on our Discord.
Register now: spr.ly/63323BEa0zF
🔹 Build #opensource #AI agents, skill files & MCP servers.
🔹 Join solo or in teams of up to 3.
🔹 Find teammates on our Discord.
Register now: spr.ly/63323BEa0zF
July 27, 2026 at 7:25 PM
Kyle and Justin are on the yellow sofa discussing #SWARM, our upcoming builder event at #BHUSA.
🔹 Build #opensource #AI agents, skill files & MCP servers.
🔹 Join solo or in teams of up to 3.
🔹 Find teammates on our Discord.
Register now: spr.ly/63323BEa0zF
🔹 Build #opensource #AI agents, skill files & MCP servers.
🔹 Join solo or in teams of up to 3.
🔹 Find teammates on our Discord.
Register now: spr.ly/63323BEa0zF
For those heading to Vegas for BSidesLV/BHUSA/DefCon, I'll be speaking a bit!
First, spicy proxy network talk at SkyTalks: bsideslv.org/talks#11f132...
Then electric sector threat evolution at ICS Village Def Con: info.defcon.org/defcon34/con...
First, spicy proxy network talk at SkyTalks: bsideslv.org/talks#11f132...
Then electric sector threat evolution at ICS Village Def Con: info.defcon.org/defcon34/con...
Talks - BSides Las Vegas
BSides Las Vegas is a nonprofit organization formed to stimulate the Information Security industry and community.
bsideslv.org
July 17, 2026 at 2:03 PM
For those heading to Vegas for BSidesLV/BHUSA/DefCon, I'll be speaking a bit!
First, spicy proxy network talk at SkyTalks: bsideslv.org/talks#11f132...
Then electric sector threat evolution at ICS Village Def Con: info.defcon.org/defcon34/con...
First, spicy proxy network talk at SkyTalks: bsideslv.org/talks#11f132...
Then electric sector threat evolution at ICS Village Def Con: info.defcon.org/defcon34/con...
Vegas or Bust!
Tyler, Huntbase, and Scout are all in for the next five days. If you're in Vegas for Bsides or Blackhat please look us up!
Wishing all attendees a fantastic #Blackhat2025 #BsidesLV #BHUSA #Cybersecurity
Tyler, Huntbase, and Scout are all in for the next five days. If you're in Vegas for Bsides or Blackhat please look us up!
Wishing all attendees a fantastic #Blackhat2025 #BsidesLV #BHUSA #Cybersecurity
August 5, 2025 at 2:10 AM
Vegas or Bust!
Tyler, Huntbase, and Scout are all in for the next five days. If you're in Vegas for Bsides or Blackhat please look us up!
Wishing all attendees a fantastic #Blackhat2025 #BsidesLV #BHUSA #Cybersecurity
Tyler, Huntbase, and Scout are all in for the next five days. If you're in Vegas for Bsides or Blackhat please look us up!
Wishing all attendees a fantastic #Blackhat2025 #BsidesLV #BHUSA #Cybersecurity