Show Notes
Are you reviewing findings or managing chaos? 🛝 Webcast Slides https://www.blackhillsinfosec.com/wp-content/uploads/2026/01/SLIDES_Simplify-Pentest-Workflows-Using-Cerno.pdf ✏️ Learn from Chris Traynor with Offensive Tooling for Operators https://www.antisyphontraining.com/product/offensive-tooling-for-operators-with-chris-traynor/ 🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits – https://poweredbybhis.com If you are a pentester, you have been there. Hundreds of findings. Critical vulns buried in noise. Too many terminal windows, lost context, and manual tracking slowing you down. On offensive work, time is everything, and disorganization wastes it fast.
Join us for a free one-hour webcast with Chris Traynor, Security Consultant at Black Hills Infosec, as he introduces Cerno, a new free and open-source tool designed to bring order to pentest findings.
Cerno is a Terminal User Interface tool that imports vulnerability data for structured review and validation. Navigate findings with keyboard shortcuts, launch tools with a single keystroke, track progress automatically, extract CVEs, look up related exploits, compare findings across hosts, and follow built-in or custom verification workflows.
You'll learn how to use Cerno to organize, review, and validate pentest findings faster, reduce chaos during engagements, and stay efficient under real-world time pressure.
Get familiar with Cerno: https://github.com/ridgebackinfosec/cerno Chapters
(00:00) - Intro – Simplify Pentest Workflows Using Cerno w/ Chris Traynor
(06:03) - The Problem
(10:55) - The Solution
(13:14) - Feature Overview
(16:37) - Database-First Design
(17:17) - Module Architecture
(18:11) - Data Flow
(19:02) - Interactive TUI
(21:16) - Severity Filtering
(22:57) - Finding Review
(25:09) - Tool Orchestration - nmap
(27:35) - NetExec & Custom Tools
(28:45) - NetExec DB [Beta]
(30:22) - Host Comparison
(32:40) - Session Persistence
(34:23) - Configuration
(36:22) - Demo Time
(57:38) - Getting Started
(57:49) - Resources
(58:13) - Thank You / Free Labs
(59:58) - CTF challenge
(01:00:23) - Free Survival Guide - Spearphish General Store
(01:00:42) - QA Start
(01:10:16) - Taking Care of Business Related Plugs
Chat with your fellow attendees in the BHIS Discord server: https://discord.gg/bhis in the #🔴live-chat channel
More from BHIS Webcasts
How do sideloading techniques work in today’s runtime environment?
How does PAM abuse fit into a real‑world attack chain? 🛝 Webcast Slides https://www.blackhillsinfosec.com/wp-content/uploads/2026/04/PAM_Tool_Slide_Deck.pdf Join us for a free one‑hour BHIS webinar with Ben Bowman as he introduces PAMSkeletonKey, a tool designed for red teamers and CTF players to explore persistence, lateral movement, and privilege escalation on Linux systems. Ben will teach why the tool was created, how to use it safely in lab environments, and what this technique means for defenders working to detect or prevent authentication abuse. You'll learn a practical understanding of Linux PAM (Pluggable Authentication Modules) authentication and how it can be abused to create a skeleton‑key backdoor for persistence. Get started with PAMSkeletonKey: https://github.com/her3ticAVI/PAMSkeletonKey
What if you could safely harness AI agents to automate real work, without spending a dime?
Post-incident “lessons learned” are extremely valuable and very, very expensive! But you don’t have to wait until “right of boom” to make meaningful improvements to your cybersecurity resilience!
What if an attacker lived inside your network for seven months and your tools never noticed?