Show Notes
On this episode, Skyler talks to Principal Security Consultant Drew Kirkpatrick who recently gave a talk at CackalackyCon where he demonstrated new features of his tool, JS-Tap. The tool allows red teams to monitor and attack web applications by rewriting code in the user's browser. Drew introduced a new feature called Mimic, which automates the process of generating custom JavaScript payloads for performing actions as the user in the application. The payloads can be integrated with a Command and Control (C2) system to execute tasks in the user's browser. Drew provided a demo of the tool using a vulnerable WordPress site. JS-Tap is a powerful tool for monitoring and attacking web applications. It allows users to log in and track client activity, including cookies, local storage, and session storage. JS-Tap can intercept form submissions and network communications, making it useful for both monitoring and attacking. It can generate custom payloads and exfiltrate data from the target application. The tool is versatile and can be used for red teaming, penetration testing, and post-exploitation. JS-TAP is available on GitHub and is open source. Watch the podcast and demo on YouTube here - https://youtu.be/cU915mxLfTo About this podcast Security Noise, a TrustedSec Podcast, features our cybersecurity experts in conversation about the security topics that interest them the most. Hosted by Geoff Walton and Producer/Contributor Skyler Tuter. Listen and subscribe wherever you get your podcasts!
More from Security Noise
Do you know what to do as a cyber incident or breach unfolds? Your team should have an incident response plan, but it could just be collecting dust on the shelf. That's where tabletops come into play. On this episode of Security Noise, Geoff and Skyler talk with Senior Security Consultant Thomas Millar about his experience developing and moderating Tabletop Exercises (TTX). Thomas walks through the process of being an InfoSec Dungeon Master and tailoring the experience to each organization's needs. Equip your earbuds and roll for initiative! About this podcast: Security Noise, a TrustedSec Podcast hosted by Geoff Walton and Producer/Contributor Skyler Tuter, features our cybersecurity experts in conversation about the infosec topics that interest them the most. Hack the planet! Find more cybersecurity resources on our website at https://trustedsec.com/resources.
Agentic AI is now a part of the team, so how do you feel about it? On this episode of Security Noise, Geoff sits down with TrustedSec CTO Justin Elze to dig into how AI fits into offensive security. They explore the new risks introduced by agentic tooling, the practical ways AI is already being used in penetration tests, and how red teams are putting models to work for broader coverage, payload generation, and vulnerability research. They make the case for keeping humans oversight and how the value of AI depends on the judgment of the people using it. About this podcast: Security Noise, a TrustedSec Podcast hosted by Geoff Walton and Producer/Contributor Skyler Tuter, features our cybersecurity experts in conversation about the infosec topics that interest them the most. Hack the planet! Find more cybersecurity resources on our website at https://trustedsec.com/resources.
Let's talk home automations, where the lights, the locks, the thermostat, and the doorbell all have opinions (and an internet connection). On this episode, Geoff and Skyler sit down to chat with TrustedSec's Adam Compton, a Principal Security Consultant and resident "Automator." Even though Adam resides in a farmhouse built in the 1800s, his home is anything but outdated. From automatic window blinds to driveway gates, Adam has automated just about everything he can. Listen as we discuss favorite websites, resources, and hardware hacks for all your home automation needs. Skyler and Adam go on a verbal side-quest to discuss going fully local when it comes to smart home assistants. Join us for another fun episode that just might have you saying, "Alexa, you're fired!" Resources: Home Assistant - https://www.home-assistant.io/ Aqara - https://www.aqara.com/en/ About this podcast: Security Noise, a TrustedSec Podcast hosted by Geoff Walton and Producer/Contributor Skyler Tuter, features our cybersecurity experts in conversation about the infosec topics that interest them the most. Hack the planet! Find more cybersecurity resources on our website at https://trustedsec.com/resources.
We're back, by way of Vegas! After a summer break, Geoff and Skyler are kicking off Season 9 of the Security Noise Podcast with tales from Hacker Summer Camp (AKA - Black Hat and DEF CON)! We are joined by Principal Security Engineer Mike Spitzer, who gave a Black Hat Training, and Senior Security Consultant James Williams, who spoke at both cons this year about his social engineering tool "Reel." They're here to give us the good, the bad, the ugly, and the pleasant surprises. We compare each con, how they have changed over the years, and things that caught their attention while they roamed the floors of each. Join us as we welcome our friends home from Hacker Summer Camp and out of that desert heat! About this podcast: Security Noise, a TrustedSec Podcast hosted by Geoff Walton and Producer/Contributor Skyler Tuter, features our cybersecurity experts in conversation about the infosec topics that interest them the most. Hack the planet! Find more cybersecurity resources on our website at https://trustedsec.com/resources.
It's a dramatic ending... of Season 8! On this episode of Security Noise, we are talking about the metaphorical soap opera that AI created. Since OpenAI was founded in 2015 as a non-profit AI lab, it has brought on dramatic interactions between its founders, culminating in a lawsuit in which Elon Musk sued cofounders Sam Altman and Greg Brockman over claims that OpenAI has "betrayed" its founding mission. We talk about allllll the drama in this season finale, joined by TrustedSec's Advisory Solutions Director Alex Hamerstone, entertaining the implications of the recent OpenAI trial and the BIG personalities that are shaping AI's future. Who will have control over that future? Investors, non-profits, founders, or giant tech platforms? And what does that mean for the rest of us, beyond Silicon Valley? About this podcast: Security Noise, a TrustedSec Podcast hosted by Geoff Walton and Producer/Contributor Skyler Tuter, features our cybersecurity experts in conversation about the infosec topics that interest them the most. Hack the planet! Find more cybersecurity resources on our website at https://trustedsec.com/resources.