Nathan Anderson

Nathan has been working in Information Technology and Cybersecurity for nine years and has competed in several Capture The Flag (CTFs) events. He holds the Offensive Security Certified Professional (OSCP) certification and, for the past five years, has enjoyed using his skills in the Penetration Testing and Network Security realms. In his off time, when he’s not taking part in a CTF, security research, or working on a new IoT project, he enjoys building furniture and hiking.

the exploit blog logo
The Exploit: Penetration Testing Insights From The Frontlines

The Exploit articles written by Nathan Anderson

  • PSE & Red Team Series: Looting

    PSE & Red Team Series: Looting
    , ,
    Nathan Anderson continues his Physical Social Engineering and Red Team series with the final step: looting. Learn what shows value to stakeholders in reports.
    Nathan Anderson June 30, 2026
  • Cool Tools Series: SCP

    Cool Tools Series: SCP
    ,
    Raxis Lead Penetration Tester Nathan Anderson continues our Cool Tool Series with SCP for data exfiltration on internal network pentests and red teams.
    Nathan Anderson April 21, 2026
  • Reynolds Ransomware BYOVD Eludes EDR Tools

    Reynolds Ransomware BYOVD Eludes EDR Tools
    , ,
    Reynolds poses a new type of threat by including a Bring Your Own Vulnerable Driver (BYOVD) in the ransomware bundle, making it harder for EDR tools to catch.
    Nathan Anderson February 20, 2026
  • PSE & Red Team Series: Social Engineering

    PSE & Red Team Series: Social Engineering
    , ,
    Lead Penetration Tester Nathan Anderson is back with more PSE and red team tips, including tailgating, impersonating, and pretexts to gain onsite access.
    Nathan Anderson January 27, 2026
  • PSE & Red Team Series: Badge Cloning

    PSE & Red Team Series: Badge Cloning
    , ,
    Lead Penetration Tester Nathan Anderson is back with more PSE and red team advice, this time looking into three tools he uses to clone badges and gain access.
    Nathan Anderson October 21, 2025
  • SpamGPT: Protecting Your Company From Large-Scale Phishing

    SpamGPT: Protecting Your Company From Large-Scale Phishing
    , ,
    SpamGPT, a complex phishing and social engineering suite has made the news recently. Learn what it is and how organizations can protect their employees.
    Nathan Anderson October 9, 2025