ZephrSec - Adventures In Information Security

Anyone who is playing around with AI for offensive and defensive tooling has likely already hit the dreaded safeguard warnings when doing something so benign but claude decides you're on the naughty step and will continue to refuse: Fable 5.1's safeguards…

When doing red team assessments, you come across all manner of technologies.

TL;DR: wp2shell chains an unauth SQLi that can be used to obtain the admin password and then login to upload a vulnerable plugin for RCE.

In my previous LLM-themed post I talked about the use of MCPs and how they have been useful for my offensive bug hunting pipeline.

I attended and spoke at BSides Leeds last weekend and one of the cool things they had was an electronic badge, nothing new as DEF CON have them every other year but still cool to look at.

Those who have read previous posts may have seen my NUC cluster series that I put together a few years ago.

Continuing along my theme of Malwareless Red Teaming and approach, today I'm going to dive into the wonderful world of windows baseline noise and blending in.

Recently I've had a week off my $dayjob so decided to actually write up some of my side projects and sort out various admin tasks, however writing about the 0day machine is something I've wanted todo for a number of weeks.

We’re a month into the launch of my course and, with around 140 paying students across red, purple, GRC, and blue team backgrounds, I’m genuinely really happy with how it’s going.

Breaking into cybersecurity in 2026 is harder than it has ever been.

Following on from my first post on Audi MMI where I walked through installing the maps update and speed cameras overlay, this post covers how to install M.I.B.

One of the biggest changes for me personally this year has been that I moved across from a leadership position to one that was solely hands on keyboard technical work and I think it's been for the better for my professional and personal development.

There are situations when you want to deliver arbitrary content, be it a file, binary, picture or otherwise, and you need to be able to restrict access via some equally arbitrary means.

Proxmox is at its core just a Debian image with some hypervisor tooling on top but there's a lot that can be done around using the tooling for nefarious purposes.

I wrote a blog post all about attacking Proxmox, some of the living off the land techniques that can be used over and above the standard Linux attacks.