EXPERIENCE
With over a decade of industry experience, Hans Lakhan has worked in both offensive and defensive roles. Before switching to red teaming, he spent 5 years working as a technical Security Analyst for a Fortune 500 telecommunications company, specializing in networking, firewalls, vulnerability management, and VPNs.
EDUCATION & CERTIFICATIONS
- B.S. Bio-Medical Information Systems, University of Minnesota
- Offensive Security Certified Professional (OSCP)
PROFESSIONAL AFFILIATIONS
Hans occasionally presents at various conferences (Blackhat, DerbyCon) and contributes to several open source projects.
PASSION FOR SECURITY
While Hans enjoys tackling complex security challenges, his true passion stems from tearing apart systems (physical, digital, process flows, and more), in which the goal is to identify weaknesses and present remediation solutions.
Featured Blogs And Resources
Discover the blogs, analysis, webinars, and podcasts by this team member.
Recovering Randomly Generated Passwords
TL;DR - Use the following hashcat mask files when attempting to crack randomly generated passwords. 8 Character Passwordsmasks_8.hcmask9 Character…
Injecting Rogue DNS Records Using DHCP
During an Internal Penetration Test or Adversarial Attack Simulation (Red Team), TrustedSec will deploy a rogue, Linux-based networking device onto a client's…
Azure Account Hijacking using mimikatz’s lsadump::setntlm
Not long ago, I was on an engagement where the client made use of a hybrid Office 365 environment. In their setup, authentication credentials were managed by…
Password Recovery 101: Cracking More of Your List
Join VP of Consulting Services Martin Bos, as well as Senior Security Consultants Paul Burkeland and Hans Lakhan for this webinar and interactive walkthrough,…
Actionable Purple Team Simulation Online Training (November 7-8)
Learn how to create specific detections to identify early Indicators of Compromise (IOCs) in our online course. Designed for those looking to improve their…
Wild West Hackin' Fest 2024
TrustedSec is happy to return as a sponsor for Wild West Hackin' Fest in 2024! Visit us at our booth at the Deadwood Mountain Grand. Principal Security…
Three Rivers Information Security Symposium (TRISS) 2024
TrustedSec is proud to be a sponsor for TRISS 2024! Three Rivers Information Security Symposium (TRISS) is a Pittsburgh area information technology and…
GrrCON 2024
TrustedSec is excited to attend GrrCON this year in Grand Rapids, Michigan! GrrCON Cyber Security Summit and Hacker Conference is put together to provide the…
BEC Basics: Your First Step to Thwarting Email Scams
Attackers never stop evolving their business email compromise (BEC) tactics, leveraging phishing, credential harvesting, and email spoofing to infiltrate…
InfoSecWorld 2024
TrustedSec is proud to sponsor and hold a two-day training at this year's InfoSec World in Lake Buena Vista, Florida. Make sure to visit our booth if you'll be…
Empower your business through better security design.
Talk directly with our experienced advisory consultants to learn how we can help.
