TrustedSec CTO Justin Elze on Red Teaming, Open Directories, and Offensive Security
Summary
TrustedSec CTO Justin Elze discusses red-team skills, common information leaks, open-directory hunting, security tools, AI’s role in offensive work, and how his hands-on background shapes technology leadership.
Key points
- Elze says effective red teaming depends on collaboration across people with different technical expertise.
- He highlights exposed documentation, permissive wikis, and information posted online as recurring opportunities for attackers.
- He uses Hunt.io to find open directories and AttackCapture features to search code, filter results, and identify tools or infrastructure.
- Elze says temporary Python web servers can unintentionally expose home directories, which may be indexed quickly.
- He sees AI and LLMs as potential accelerators for coding, proof-of-concept development, and analysis in offensive-security workflows.
- His red-team experience informs his CTO approach: consider how technology can fail and avoid unnecessarily expanding the attack surface.
Article Details
- Topic
- Interview with Justin Elze about offensive security, red teaming, his CTO role at TrustedSec, and race-car data.