Ben Lincoln is a Managing Principal at Bishop Fox and focuses on application security. He has extensive experience in network penetration testing, red team activities, white-/black-box web/native application penetration testing, and exploit development. Prior to joining Bishop Fox, Ben was a security consultant with NCC Group, a global information assurance consulting organization. He also previously worked at a major retail corporation as a senior security engineer and a senior systems engineer. Ben delivered presentations at major security conferences, including "A Black Path Toward the Sun" at Black Hat USA 2016. Ben is OSCP-certified and has released several open-source exploit tools. Ben's personal projects and research at https://www.beneaththewaves.net
From Ben Lincoln
Resource / Reports
Product Security Reviews: The Basics Are Still the Breach
Oct 29, 2025
Blog / Technical Research
Broken Hill: A Productionized Greedy Coordinate Gradient Attack Tool for Use Against Large Language Models
Sep 24, 2024
Resource / Virtual Sessions
Exploiting Java Deserialization in GWT: From Detection to Command Execution
Jan 30, 2024
Blog / Technical Research
GWT: Unpatched, Unauthenticated Java Deserialization
Dec 18, 2023
Resource / Virtual Sessions
Combatting Adversaries: Proactive Social Engineering & Network Testing
Sep 19, 2023
Resource / Virtual Sessions
Breaking Down Q2's Critical CVEs: From Discovery to Exploitation
Jun 09, 2023
Blog / Advisories
Windows Task Scheduler Application, Version 19044.1706 Advisory
Apr 04, 2023
Blog / Advisories
Microsoft Intune, Version 1.55.48.0 Advisory
Apr 04, 2023
Resource / Virtual Sessions
Combatting Adversaries: Proactive Social Engineering & Network Testing
Jan 01, 2023
Resource / Workshops & Training
Process Injection on Linux: A Deep Dive into asminject.py
Sep 17, 2022
Resource / Guides
asminject.py: Compromise Trusted Linux Processes and Containers
Sep 01, 2022
Blog / Technical Research
Ruby Vulnerabilities: Exploiting Dangerous Open, Send and Deserialization Operations
May 17, 2022
Resource / Virtual Sessions
Tool Talks: Debugging Ruby Exploits
May 12, 2022
