Andy Gill

A thread of some of the posts I’ve released in 2024 blog.zsec.uk/lolsysadmin/

Thanks @hackglasgow.bsky.social for a truly excellent day, one to remember

Idk how @zephrfish.yxz.red makes me feel so pretty.

When I asked @zephrfish.yxz.red how our brand of slide stupidity would play in Glasgow he responded “well enough”. So this ought to be interesting. 😂

We're delighted that ZephrSec is a sponsor for Hack Glasgow 2026! Founder @zephrfish.yxz.red is an experienced red teamer, author, regular attendee (and previous speaker) at our Hack Thursday meetup, and keen supporter of the cyber security community, especially in his home town of Glasgow.

This year's event features @gabsmashh.bsky.social, Liam Follin, Scott McCracken, @zephrfish.yxz.red, Alex Close, Marie Dubremetz, Ken Munro, @akacki.net, Aaron Kelly, @gl4cier.bsky.social, Chris Bore, Michael Reimsbach, @rxerium.com, Ehren Osborne, [...]

Happy Hack Thursday, and happy Hack Glasgow speaker announcement! We're excited to announce that @zephrfish.yxz.red and Alex Close will be presenting 'The Hunted Becomes the Hunter: Catching Red Teamers and Pentesters and Spotting Adversarial Patterns' at Hack Glasgow!

It’s @bsidesleeds.bsky.social today and ZephrSec sponsoring. Come along to my talk talk at 11.40 in Track 1 all about blending into environments using defensive tools and understanding. Our 10% off coupon is also still live: LTR101-10Y lms.zsec.red

As we get ever closer to Saturday and the conference day, we wanted to put out another huge thank you to all of our fantastic sponsors ❤️ Genuinely, BSides Leeds would not be able to run without your support. We're so grateful that you were keen to be involved and help us make this happen!

Torq @semgrep.com @pentestpartners.bsky.social ZephrSec - @zephrfish.yxz.red

Always happens when I take time off I end up writing things, here's the latest post blog.zsec.uk/baselining-w... all about learning the baselines of Windows, it doesn't cover everything and anything but I've spun up a lab with observability and tried to write some detections baselining. Enjoy!

🕹️ SPEAKER ANNOUNCEMENT 🎮️ We're excited to have @zephrfish.yxz.red presenting his talk 'Archaic Creativity: Pulling At Infinite Threads'. Catch Andy's talk on Track 1, and keep an eye on our website and socials for the full schedule release! #BSidesLeeds #SpeakerAnnouncement

It’s been 10 years since I published my first book(LTR101), so to celebrate I’m giving 10% off my red team course, Malwareless Adversarial Emulation (MAE). Check it out here: lms.zsec.red Discount code: LTR101-10Y Valid until the end of August 2026.

It's clear to see the amount of work that's gone into it — please do take a look: lms.zsec.red #HackGlasgow2026 #SponsorAnnouncement

We're delighted to announce ZephrSec as a sponsor for Hack Glasgow 2026! Founder @zephrfish.yxz.red is an experienced red teamer, author, regular attendee (and previous speaker) at our Hack Thursday meetup, and keen supporter of the cyber security community, especially in his home town of Glasgow.

Welcome onboard ZephrSec! 🎉 ZephrSec is all about giving back to the community, helping others grow through hands-on training, adversarial emulation, and real-world security insights. Levelling up the next generation of defenders & attackers 🚀 lms.zsec.red @zephrfish.yxz.red

This is what happens when I take time off, I actually write silly length blog posts and deep dive things blog.zsec.uk/bullyingllms/ the post dives into a MCP pipeline I've put together for autonomous 0day hunts.

You've got till Friday 3rd to submit your talks and workshops. We've got plenty of talks but could do with a few more workshops, so if you've got an idea, but aren't sure, submit it anyway and let us decide forms.gle/hLXt1dibQrA6...

It's 4 weeks to the date since I launched ZephrSec Ltd LMS and Malwareless Adversarial Emulation(MAE), here's a blog post about a lot of the challenges, lessons learnt and general chaos of building and running your own platform and all the fun that follows building blog.zsec.uk/roll-your-ow...

With Easter coming up quick it is time for a date announcement. 1 March - CFP and call for crew opens 1 April - Pre talk announcement tickets 3 April CFP and CFC closes ~ 20 April speakers confirmed ~ 24 April main ticket drop Links and stuff coming closer to the dates.

Our first fully committed sponsor is @zephrfish.yxz.red. Long time supporter as a speaker and now a sponsor as well. Andy would like everyone to know about his Malwareless Adversarial Emulation training course lms.zsec.red We may be biased, but we reckon it is top quality stuff.

Since launching MAE over the weekend I’ve had a lot of great feedback from the community and I want to say how thankful I am for everyone’s support. One of the requests I had was for multi language support on subtitles, so I went ahead and added it to the platform. go check it out lms.zsec.red

I love watching my friends create awesome stuff. @zephrfish.yxz.red made some artisan, farm to table, shell to terminal red team training for you. lms.zsec.red

Today’s the day, finally got around to publishing my red team course, with video, written and self spin up labs. lms.zsec.red

Turns out I’m not very active on here or Twitter anymore even though over the years I’ve accumulated 19k followers on Twitter 😬

Made a thing, mucking about with python and a LDAP browser concept to ingest straight into BloodHound but also just a nice alternative to ADExplorer with fewer LDAP queries, simple LDAP browser using PyQt as a GUI and neo4j-driver to ingest into BH. github.com/ZephrFish/py... #bloodhound #redteam

Couple updates: Course Trailer and Sign Up: mae.zsec.red GoClipC2 - blog.zsec.uk/clippy-goes-...

Weekends are for random projects Here is a blog post all around Kerberos errors and a bonus interactive app built in collaboration with @thecontractor.io Errorism Index for Kerberos blog.zsec.uk/common-tool-... kerberos.errorism.io

Weekends are for random projects Here is a blog post all around Kerberos errors and a bonus interactive app built in collaboration with @thecontractor.io Errorism Index for Kerberos blog.zsec.uk/common-tool-... kerberos.errorism.io

Should probably start writing my talk then

First round of talk emails have just gone out. We had over 40 submissions for 18 slots so unfortunately have had to reject over half of them. If you haven't had an email yet, please hang on, more will be sent out shortly as we finalise other things.

A thousand sunsets and each one will differ slightly

Elbows up, Canada.

There we go submitted a thing

Sign it nerds you.38degrees.org.uk/petitions/ke...

Here's RepoMan, a proof of concept surrounding git commit poisoning. The blog post dives a little deeper into how it all works and the rationale behind it. blog.zsec.uk/navigating-a... github.com/ZephrFish/Re...

Here's RepoMan, a proof of concept surrounding git commit poisoning. The blog post dives a little deeper into how it all works and the rationale behind it. blog.zsec.uk/navigating-a... github.com/ZephrFish/Re...

Finally got around to finishing the series here's part 3 of my NUC stack series blog.zsec.uk/homelab-clus...

Better to be a warrior in a garden than a gardener in a war

Following up on my talk, I mentioned if you wanted to get my books for free, you could probably find them on Google; well, there's no need. I've set the bundle on leanpub for the ebook to $0.00, aka free, so you can get a copy of both LTR101 and LTR102! leanpub.com/b/LearningTh... #SecuriTay2025

Dundee I have arrived 👋🏻

Got a busy few months ahead but I will eventually finish the NUC series! If you missed the first two parts they're here: blog.zsec.uk/homelab-clus... blog.zsec.uk/homelab-clus...

Slides are done for SecuriTay and talk will be tomorrow afternoon on track 1, come along and listen to "Think Like an Adversary" designed to show both sides of the coin what a real world attack looks like and where the detection opportunities exist

As I slowly ease back into using socials I think I'm going to fully move off of Twitter and keep my account locked but rather post on here. If you followed me from Twitter hello again! But if you're new here, welcome! I post a mix of photography, hacks, rants and everything in between 🤘🏻

12 years ago I went to see You Me At Six, and in 5 weeks time I'll see them again at their final gig in Glasgow🥲