Timothy McKenzie

AI-ing OWASP-focused Web App Pentest Workflow

This session walks through a modern web app pentest workflow using OWASP tools, Burp MCP, DefectDojo, and AI-assisted reporting to accelerate recon, scanning, and triage.

AI Assisted Web Application Pentesting

The demo will move through reconnaissance, vulnerability scanning, Burp Suite integration, data import into DefectDojo, and AI-assisted report writing—providing a complete, modern pentesting workflow.

Information Security and LLMs

Large Language Models (LLMs) such as ChatGPT, Claude, and Grok have become very powerful. This talk is full of live demonstrations of the kinds of things information security professionals can do with the LLMs. Examples include analyzing and manipulating shell code, writing exfiltration code, analyzing logs, and more.

Red and Purple Team: Improve the defenders' ability to stop the attackers

Defenders must be constantly vigilant in their efforts to protect their organization's environment. Through practice, the defenders can be sharpened by red and purple team exercises. This presentation will explore some cassstudies where exercise improved the organization's security posture.