PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Epic Fails and Heist Tales: A Red Teamer’s Journey to Deadwood

bishopfox.com | blog | #conference | #red-team | #blue-team | #penetration-testing | #physical-security | #lessons-learned
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

At Wild West Hackin' Fest, Bishop Fox's Alethe Denis shares red team stories — including a physical test where a skilled blue team outmaneuvered her — showing how failures sharpen offense and defense.
Published
Collected

Related coverage

blog · bishopfox.com
Accidental Engineer: Building My First Hardware Tool the Hard Way
A Bishop Fox consultant with no hardware background builds a field-ready badge cloning tool for physical assessments, sharing lessons on rapid learning and how hardware punishes unchecked assumptions.
blog · bishopfox.com
Unified Code, Unified Risks: Uncovering Vulnerabilities in .NET MAUI Applications
Bishop Fox shows how to bypass .NET MAUI's platform packaging to extract readable C# assemblies from Android and iOS apps, then use that shared-assembly insight to uncover critical vulnerability patterns in common business logic.
blog · bishopfox.com
Navigating Workplace Security: Red Team Insights for the Return to Office
As return-to-office policies spread, Bishop Fox makes the case for physical security testing: tailgating, badge cloning and unattended devices remain easy wins — red teams expose the gaps first.
blog · bishopfox.com
Purple Teaming: Validating Cybersecurity Investments and Enhancing Efficiency
Bishop Fox explains Purple Teaming—merging Red Team offense with Blue Team defense—to validate security investments, establish measurable baselines and communicate evidence-based ROI.
blog · bishopfox.com
Badge of Shame - Breaking Into Secure Facilities with OSDP
Bishop Fox lays out five exploitable vulnerabilities in the OSDP badge reader protocol—starting with the fact that encryption is optional—and what defenders can do to secure facility access control.
blog · bishopfox.com
Lessons Learned from Years of Red Teaming in Cybersecurity
Daniel Wood distills lessons from years of government and Fortune 500 red teaming, emphasizing applied critical thinking, trusting instincts and building teams with complementary skills.
Back