AI-Based Web Attack Testing – Tom Pore – BH25 #1

This episode is sponsored by
Full Segment Notes
Key Moments
  • 0:00 - Intro from Black Hat 2025
  • 0:30 - How Attackers Are Using AI Today
  • 01:49 - The Shift to Continuous Application Testing
  • 02:31 - Pentera’s New AI-Driven Web Attack Capability
  • 03:27 - Using LLMs & NLP for Context-Aware Attacks
  • 04:42 - Identifying and Pivoting on Sensitive Data
  • 05:06 - Credential Extraction & Recursive Testing
  • 06:37 - Language, Culture, and System-Aware Payloads
  • 07:49 - Solving Authentication Challenges in Testing
  • 10:10 - The Future of AI in Red vs Blue Teaming
Guest
AVP, Sales Engineering at Pentera

Thomas Pore is the AVP of Sales Engineering at Pentera, where he helps organizations close real-world security gaps through automated validation and offensive expertise. With over 20 years in network security, his background spans NDR, encrypted traffic analysis, ethical hacking, and hands-on incident response. His insights come from the front lines—uncovering how attackers succeed and helping defenders take back control.

Stay in the Know, No Smoke and Mirrors – Join Our Newsletter

You can skip this ad in 5 seconds