About Joshua Wright

I am a SANS Faculty Fellow, a Senior Technical Director at Counter Hack, and the author of SEC504: Hacker Tools, Techniques, and Incident Handling, one of the most widely taken courses in the SANS curriculum. I have spent more than two decades working in offensive security and incident response, and teaching the people who do that work.

What I work on

My focus is offensive operations and incident response. Much of my earlier research was in wireless, mobile, and Internet of Things (IoT) security, from 802.11 and Bluetooth to ZigBee, smart meters, and mobile applications. That work produced open-source tools that practitioners still use, including Asleap, coWPAtty, and KillerBee.

I build in the open. The tools I actively maintain live on GitHub, and recent projects lean toward security automation and applying AI to offensive and defensive problems.

Teaching and speaking

Teaching is a large part of what I do. I write and teach for the SANS Institute, and I speak regularly at the RSA Conference, at SANS events, and at regional hacker conferences. Recorded talks and demonstrations are on my YouTube channel.

Elsewhere