Tim Tomes

DoD/DoJ organizations, and anyone with a legitimate use case are welcome as well.

I've been a bit hesitant to do this, but I think it's time. I've built a SaaS around a much improved version of HoneyBadger and it needs some field testing. I invite any company doing Active Defense or any Law Enforcement Agency to contact me for trial access. DMs open. Thanks!

"most sophisticated cybersecurity" Sounds like a bad thing. KISS. No wonder you go owned. No one knows how to use your overly complicated "most sophisticated" system. And "next generation firewalls"? Did you get a pre-release of some magical new tech or something?

"Travelex has one of the most sophisticated cybersecurity programs and next generation firewalls..." What does that even mean?

Does anyone know of a cloud penetration testing course that they would recommend? No SANS please. Thanks! CC:@tlillyusmc

If I get through this week without the flu, it will be nothing short of a miracle. It's getting real in the Tomes' household.

Wow! Found an entire shoebox of the Star Trek Next Generation trading card game too! Apparently I was a bigger fan of that one in the 90s.

Wow. Just stumbled upon my old 1995 Magic the Gathering Ice Age Deckmaster set. I just started playing again recently. Wonder if these are even usable anymore. Worth something maybe?

Just heard from a former student that started freelance work and was able to move from a blue team role to a full-time web app pentester experiencing great success, all because of #PWAPT. I mean... wow. That's why we do it, right? Seriously moved right now.

Time's ticking on getting signed up for #PWAPT w/#BSidesGVL. Join us for the best training money can buy! (I might be slightly biased) https://www.lanmaster53.com/events/pwapt-greenville/ …

I already have DNS filtering and device management in place, but I want to open things up a little. They aren't babies anymore.

I suppose I should have emphasized that all I'm really concerned about at the moment is web traffic. This is basically my first step in keeping an eye on what my preteens are doing on their devices.

Looking for a way to have better visibility into what specific devices on my network are doing. I am currently using a Pi-Hole, but that doesn't give me anything more than DNS hostnames. I'm also using Google WiFi, which prevents system specific visibility in Pi-Hole. Ideas?

If HoneyBadger were a SAAS, would anyone be interested in using it as a non-attrib service?

I'll vouch for Ryan. He has been a student in both #PWAPT and #PBAT. Very smart, driven, and passionate. If I were looking to grow my company, Ryan would be at the top of my short list of candidates to hire.https://twitter.com/dreadjak/status/1219391461462024195 …

Anyone know how to get the remote IP address of a client requesting a web app in a Docker container? I know how to get it on the app side, but it's the wrong IP address. The Docker network acts like a proxy.