Shang-De “John” Jiang / HackerPeanutJohn. Identity Security research & enterprise security design. UCCU Hacker co-founder.
Taiwan
Joined October 2017
- Tweets20
- Following213
- Followers86
- Likes48
John Jiang | HackerPeanutJohn retweeted
I just started a new blog, and this is my first post. I took a bit of PTO, so this is a little record of some fun I had playing around with Intune during that time. It's about enrollment restriction bypass😄
temp43487580.github.io/intun…
John Jiang | HackerPeanutJohn retweeted
#TROOPERS25 AD & Entra ID Security track resources, on the @ERNW_ITSec blog @Insinuator
Featuring @Jonas_B_K @martinhaller_IT @TEMP43487580 @JsQForKnowledge @fabian_bader @_dirkjan @ShitSecure @DrAzureAD @kazma_tw @subat0mik @unsigned_sh0rt @ericonidentity
insinuator.net/2025/08/troop…
Just wrapped up our talk at DEF CON 33 !
Wandering around after my talk, and people are still coming up to recommend listening to our research!
It's the greatest affirmation for a researcher.
#DEFCON
John Jiang | HackerPeanutJohn retweeted
First international talk — at @WEareTROOPERS !
Saw views from my history textbook, and met legends I used to only see on the internet.🫡
Big thanks to my best research partner, my mentor @SecurityThunder , and everyone who showed up to hype me up 🔥
John Jiang | HackerPeanutJohn retweeted
Today at #Troopers24 we released Certiception – the ADCS honeypot we always wanted to have.
Blog: srlabs.de/blog-post/certicep…
Source code: github.com/srlabs/Certicepti…
Slide deck, including our guide to deception strategy: github.com/srlabs/Certicepti…
I am honored that our submission was accepted for TROOPERS.
Looking forward to Heidelberg next month!
We just published an almost complete list of talks that have been accepted for #TROOPERS24. Thanks to all of you who participated in the CFP! So many excellent submissions. We really had a hard time to decide which will fit best for this year!
troopers.de/troopers24/talks…
I'll be presenting at #HITB2023HKT, discussing how we leverage LLM as active directory security assistant.
#HITB2023HKT GPTHound – Your Active Directory Security Assistant - John Jiang - conference.hitb.org/hitbsecc…
See you at Blue Team Summit!
👏@SANSDefense #BlueTeamSummit 2022 is almost here! Learn how to accurately diagnose #PrivilegeEscalation through your #ActiveDirectory with CyCraft cybersecurity researchers John Jiang and Gary Sun.
🚨Join us LIVE Online for free: bit.ly/CyCraftSANSBlueTeam22
John Jiang | HackerPeanutJohn retweeted
We observed an attacker #VPN directly into an internal network to bypass preventive security & then create a digital skeleton key to gain admin access across the entire network. Is your #remotework force secure?
Read our full analysis >> ow.ly/mKa950zgD2c
John Jiang | HackerPeanutJohn retweeted
[Blog] Lateral Movement Using Outlook’s CreateObject Method and DotNetToJScript posts.specterops.io/lateral-…
John Jiang | HackerPeanutJohn retweeted
This is exactly why recovery from APT is difficult: they have multiple vantage points to get inside your network once they're in, lateral mouvement is deadly slideshare.net/FrodeHommedal… by @FrodeHommedal
