Jiun-Ming (Jimmy) Su, security researcher in Taiwan.
I work on Active Directory and Entra ID exploitation at CyCraft Technology. I write here about AD, hybrid identity, and red team tooling.
Speaking
2026
2025
- SO-CON Woof, Woof! Meet Sniffer BloodHound U.S.A
- Offensive AI Con WOOF! Sniffer Dog Off the Leash U.S.A
- HITCON Training Active Directory & Microsoft Environment Attacks Taiwan
- CYBERSEC Sneak Skill 100: Hidden Attack Surface: SCCM Taiwan
2024
- HITCON 101 Pwning Active Directory via AD CS Taiwan
- CYBERSEC Azure Ascend & Assault from Above Taiwan
2023
Certifications
- SpecterOps IDOTIdentity-Driven Offensive Tradecraft Kerberos, NTLM, AD CS, ADFS, SAML, Okta, Entra ID, OAuth, hybrid attack paths
- Zero-Point Security CRTOCertified Red Team Operator Cobalt Strike C2, adversary simulation, AMSI/ETW patching, sleep obfuscation, in-memory loaders, EDR/AV evasion
- Altered Security CRTECertified Red Team Expert Forest and domain trusts, delegation abuse, full-scope Active Directory attack
- HackTricks ARTAAWS Red Team Apprentice IAM privilege escalation, access-control abuse, service misconfiguration
- GRTAGCP Red Team Apprentice IAM privilege escalation, access-control abuse, service misconfiguration
- INE eJPTeLearnSecurity Junior Penetration Tester Network and host enumeration, exploitation and post-exploitation fundamentals