-
Web Application Authorization: Taming the Perfect Storm
-
Upstate SC ISSA 2025
-
BSides Augusta 2025 · video
-
Wild West Hackin' Fest 2025
-
BSides Greenville 2025
-
{JWT}.{Misuse}.&Abuse
-
Wild West Hackin' Fest 2024 · video
-
Carolina Code Conference 2024 keynote · video
-
BSides Augusta 2023 · video
-
Sucking @Capitalism
-
BSides Greenville 2020 keynote · video
-
Rapid Recon for Red Teams
-
Upstate SC ISSA 2020 · slides
-
Clemson University Cyber Meetup 2019
-
To CORS! The Cause of and Solution to All of your SPA Problems
-
DerbyCon 9.0 2019 · video
-
BSides Greenville 2019
-
InfoSec Proverbs: The Tim Tomes Top 10
-
BSides Greenville 2018 keynote
-
Burping for Joy and Financial Gain
-
DerbyCon 7.0 2017 · video
-
BSides Augusta 2017 · video
-
Edge Cases in Web
-
Ermahgerd Werb Verlns
-
Upstate SC ISSA 2016 · slides
-
Church IT Network Conference 2016 · slides
-
OSINT for AppSec: Recon-ng and Beyond
-
Upstate SC ISSA 2015
-
DerbyCon 5.0 2015 · video · slides
-
BSides Augusta 2015 · video
-
Ball and Chain: A New Paradigm in Stored Password Security
-
DerbyCon 4.0 2014 · video
-
Stored Password Security: The Adobe Guide to Keyless Decryption
-
BSides Augusta 2014 · video
-
Look Ma, No Exploits! - The Recon-ng Framework
-
Upstate SC ISSA 2013 · slides
-
DerbyCon 3.0 2013 · video
-
BSides Augusta 2013 · video
-
Look Ma, No Exploits! The Next Generation of Open Source Reconnaissance
-
Boise ISSA Conference 2013
-
Hide and Seek, Post-Exploitation Style
-
Next Generation Reconnaissance
-
Web Recon for Penetration Testing and Network Defense
-
Colorado Springs ISSA Conference 2012 keynote
-
Lurking in the Shadows
-
Augusta ISSA 2011
-
Hack3rcon 2011 · video