Chat with a White Hat

The conversation delves into the importance of reporting in offensive security, highlighting the need to convey the impact of work and balance hacking with reporting responsibilities.

Takeaways

• Reporting is crucial in offensive security
• Balancing hacking and reporting is essential for effective penetration testing.

Chapters

• 00:00 The Importance of Reporting in Offensive Security

The conversation covers the early exposure to computers and the influence of family on the interest in computers.

Takeaways

• Early exposure to computers
• Influence of family on interest in computers

Chapters

• 00:00 Early Exposure to Computers

Discovering a critical security flaw in infrastructure testing led to the realization of the importance of thorough checks and vigilance. The incident highlighted the need to verify all aspects of the system to uncover potential vulnerabilities.

Takeaways

• Thorough checks are essential
• Vigilance is key

Chapters

• 00:00 Infrastructure Testing and Security Flaws

The conversation delves into the use of AI in security, addressing concerns, optimization, bug discovery, code generation, and its role in penetration testing. It also highlights the need for human guidance in AI-driven security testing.

Takeaways

• AI is being used in security for reporting, password cracking, and bug discovery.
• AI is seen as a force multiplier for pen testers, making good pen testers better and bad ones worse.

Chapters

• 00:00 AI in Security

The conversation delves into the significance of the technology being discussed, particularly its impact on the financial industry and the associated vulnerability concerns.

Takeaways

• Importance of the Technology
• Vulnerability Awareness

Chapters

• 00:00 The Significance of the Technology

The conversation delves into the early days of computer security and the transition from Perl to Python, providing insights into the tools and techniques used during that time.

Takeaways

• Early days of computer security
• Transition from Perl to Python

Chapters

• 00:00 Early Days of Computer Security

New episode of Chat with a Whitehat is live.

In this Episode, Ed Williams shares his journey from early BASIC programming to leading modern red team operations. We dive into real-world penetration testing stories, offensive security insights, and how AI is reshaping the field—while fundamentals still remain the key to success.

00:00 – 00:32 | Introduction & Ed Williams’ background
00:32 – 02:56 | Early interest in computers (BBC Micro & BASIC)
02:56 – 04:05 | Getting into cybersecurity & university experience
04:05 – 05:48 | Early tools, Perl vs Python, and learning to hack
05:48 – 07:09 | Building projects (mini kernel, remote bash, Unix systems)
07:09 – 08:30 | Fastest hack ever (domain admin in seconds)
08:30 – 09:59 | Real-world red teaming & social engineering stories
09:59 – 12:42 | Bank engagements & physical security testing
12:42 – 14:45 | Favorite type of security testing (infrastructure vs web)
14:45 – 17:09 | Importance of planning in penetration testing
17:09 – 18:07 | Time management & lessons learned during tests
18:07 – 19:33 | How to get better results in security testing
19:33 – 23:43 | How AI is being used in cybersecurity today
23:43 – 27:32 | AI’s impact on offensive & defensive security
27:32 – 29:33 | Biggest misconceptions about penetration testing
29:33 – 30:41 | Most underestimated attack vector (passwords)
30:41 – 32:41 | Why fundamentals matter in cybersecurity
32:41 – 35:19 | Advice for breaking into cybersecurity (2026)
35:19 – 36:10 | Where to find Ed Williams & closing remarks

The conversation delves into the nuances of database exploitation and vulnerability, emphasizing the importance of understanding the type of SQL and backend used. It also highlights the significance of database documentation and fingerprinting in the context of cybersecurity.

Takeaways

• Database exploitation depends on the type of SQL and backend used
• Understanding database documentation and fingerprinting is crucial

Chapters

• 00:00 Database Exploitation and Vulnerability

The conversation delves into the impact of AI on cybersecurity, both in offense and defense. It also explores the accessibility of pen testing for small businesses and individuals, highlighting the changing landscape of cybersecurity.

Takeaways

• AI impact on offensive and defensive cybersecurity
• Accessibility of pen testing for small businesses and individuals

Chapters

• 00:00 AI Impact on Cybersecurity

Ed Williams shares some of the coolest hacks he has pulled off, including a quick domain admin password discovery and social engineering tactics for gaining access to secure buildings.

Takeaways

• Vulnerability enumeration is crucial in infrastructure testing.
• Social engineering can be used to gain physical access to secure buildings.

Chapters

• 00:00 Quick Domain Admin Hack