War Stories

Hosted by Zac Davis

TechnologyInterviews guests

Website RSS feed

Episodes

Latest episode

Sep 2024

Language

EN-US

About the show

Zac Davis hosts War Stories, a podcast featuring stories from real life penetration testers. Zac covers their background, favorite tools, and stories that define their career. Sponsored by ⁠Cyber Coffee⁠. Real hackers need real caffeine. ⁠www.sevnx.com/shop

Listen to episodes

22 recent

September 11, 2024Episode 2259 min

Episode 22: "Interview with a Cyborg" ft. Len Noe

This week, Zac dials in with Len Noe, the world's first "augmented ethical hacker" (of course by that... we mean CYBORG!). Len has implanted 10 microchips between his elbows and fingers, which he can leverage to execute a variety of offensive security attacks. Len walks us through his journey of developing new techniques using implantable technologies, as well as how he fortifies his own personal security using these implants. Easily one of the most interesting humans in our generation. Len is also an author with a new book "Human Hacked: My Life and Lessons as the World's First Augmented Ethical Hacker" coming out October 29th! Pre-order for Len's book: https://www.amazon.com/Human-Hacked-Lessons-Augmented-Ethical/dp/1394269161 Len's implant manufacturer: https://dangerousthings.com/ Len's body mechanic: https://www.shamanmods.com/

August 27, 2024Episode 2156 min

Episode 21: "Hacking Apple" ft. Mike Piekarski

This week, Zac sits down with Mike Piekarski. Mike is a bug bounty specialist, penetration tester, and solutions architect. He is also the founder of Breach Craft (breachcraft.io), a boutique cybersecurity firm based in Pennsylvania. Zac and Mike discuss Mike's most successful bug bounty targeting one of the biggest companies in the world via an insecure Cisco configuration. They also touch on the power of the Project Discovery toolkit (projectdiscovery.io), and Mike tells the story of trying to use a Santa suit on a social engineering engagement. Produced www.sevnx.com CyberCoffee drinkcybercoffee.com Use promo code WAR10 to save 10%

August 16, 2024Episode 2050 min

Episode 20: "The Art of Deception" ft. Faisal Tameesh

This week, Zac sits down with Faisal Tameesh. Faisal is a senior red team operator at NVIDIA and a "hacker of all trades" with experience in software development, pentesting, red teaming, social engineering, exploit development, and reverse engineering. Zac and Faisal discuss the technical details of the CrowdStrike incident, take a deep dive on the art of human deception and how the cybersecurity landscape evolves over time. Finally, they share several stories involving social engineering and other common issues we encounter on penetration tests. Faisal's Website - https://primalcerebral.com/ Duality Github - https://github.com/AonCyberLabs/DUALITY Produced www.sevnx.com CyberCoffee drinkcybercoffee.com Use promo code WAR10 to save 10%

August 6, 2024Episode 1746 min

Episode 19: "IDOR, APIs, and Passwords OH My!" ft. Jullian Gerhart

This week Zac sits down with Jullian Gerhart. Jullian is a Managing Consultant at NCC Group, which specializes in application security and application security pentesting. Jullian is also a contributor to the Application Defense Alliance (https://appdefensealliance.dev/) working to create a standardized framework for securing applications in the Google Play and Apple App Stores. Zac and Jullian discuss the current state of application security, their favorite web application security vulnerability (LOVE LIVE IDOR), and we get a great story from Jullian about compromising extremely sensitive information from an unsecured API. Produced www.sevnx.com CyberCoffee drinkcybercoffee.com Use promo code WAR10 to save 10%

July 25, 2024Episode 1830 min

Episode 18: "Cars and Cyber" ft. Brett DeWall

This week, Zac sits down with his longtime friend Brett DeWall. Brett is a Staff Specialist at White Oak Security (CyberAdvisors). He is a pentester, red teamer, bug bounty hunter, and security researcher. Zac and Brett do a deep dive on the RFID hacking research Brett has conducted, as well as go over his RFID skimming solution (SkimJob). They also tell the story of starting their careers together as interns, and reminisce about physical security engagements together the did together. Brett's GitHub - https://github.com/badbiddy SkimJob on White Oak Security Github - https://github.com/WhiteOakSecurity/SkimJob Produced www.sevnx.com CyberCoffee drinkcybercoffee.com Use promo code WAR10 to save 10%

July 18, 2024Episode 1732 min

Episode 17: "Hey Hoang, umm Cylance is on the Phone..." ft. Hoang Bui

This week, Zac sits down with Hoang Bui. Hoang specializes in reverse engineering, while dabbling in penetration testing and red teaming. Zac and Hoang discuss the levels of abstraction and different approaches for writing and breaking programs. Hoang tells a unique story of bypassing EDR, blogging about it, and getting himself into hot water in the process! Are you hiring a researcher or reverse engineering specialist? Hire Hoang! - Hoangprod@gmail.com Produced www.sevnx.com CyberCoffee drinkcybercoffee.com Use promo code WAR10 to save 10%

July 11, 2024Episode 1645 min

Episode 16: "Yea, we just stole half a million dollars" ft. Shelby Spencer

This week, Zac sits down with Shelby Spencer. Shelby is a developer turned red teamer who has worked on some of the most elite teams in the offensive security world. Zac and Shelby discuss the breakdown between pentesting and red teaming, tools development (Shelby created the Jenkins Attack Framework), and different security perspective across industries. We also get two technical deep dives from Shelby, which include hacking into controlled farming equipment remotely and stealing half a million dollars from a bank! Shelby's Github - https://github.com/shellster Produced www.sevnx.com CyberCoffee drinkcybercoffee.com Use promo code WAR10 to save 10%

June 3, 2024Episode 1551 min

Episode 15: "The story of Invoke-Shellcode" ft. Matt Graeber

In this special episode of War Stories, Zac sits down with one of his heroes, Matt Graeber! Matt is the Director of Threat Research at Red Canary. Matt is known for his expertise in threat research and offensive security. He has made significant contributions to the offensive security field through his work on a variety of topics including PowerShell security, Windows endpoint security, detection engineering strategies and much more. His research has been influential in advancing the understanding of modern cyber threats and improving defensive strategies against them. Zac and Matt cover a variety of technical topics including the origins of Invoke-Shellcode, Matt's favorite LOLBINS, his research in code signing and other esoteric Windows security topics. Matt shares his more powerful tool, the research methodology inspired by the work of James Forshaw, and they end the show with a story of Matt falling through a ceiling! Don’t miss this one! Produced www.sevnx.com CyberCoffee drinkcybercoffee.com Use promo code WAR10 to save 10%

May 24, 2024Episode 1437 min

Episode 14: "This is where the zombies come" ft. Nick Delewski

This week Zac chats with Nick Delewski. Nick is a Principle Security Consultant at MedSec specializing in medical device testing. Zac and Nick talk about the current state of medical device testing and cybersecurity regulation, Nick's favorite tools including a microwave oven (see below), and a story from Nick about the most physical danger he has ever been in on a penetration test! Blade RF Dragon OS Microwave Oven Produced www.sevnx.com CyberCoffee drinkcybercoffee.com Use promo code WAR10 to save 10%

May 16, 2024Episode 1327 min

Episode 13: "Laughing Hysterically to Fearing for Our Lives" ft. Matt Shirley

This week, Zac sits down with Matt Shirley. Matt is the VP of Technical Services at Fortalice Solutions. Fortalice Solutions is a boutique cyber security services firm based in Charlotte NC, founded by Theresa Payton, former CIO to the White House. Zac and Matt discuss the importance of turning technical pentest findings into actionable strategy, RFID badge cloning and the hilarious situations that come from physical assessments. Produced www.sevnx.com CyberCoffee drinkcybercoffee.com Use promo code WAR10 to save 10%