bishopfox-logo-grey
Get Started
TomNomNom AMA

TomNomNom AMA

Tom Hudson (aka TomNomNom) participates in this Discord AMA about the pen testing tools he's created over the years, his cybersecurity journey, and more.

In this DIscord AMA, Tom Hudson (TomNomNom) discusses some of his most famous hacking tools, his cybersecurity journey, and his life at Bishop Fox.

You can join our Discord server here: https://discord.com/invite/red...

Tom Hudson BF Headshot

About the author, Tom Hudson

Senior Security Analyst

Tom Hudson is a Senior Security Engineer at Bishop Fox, where he is part of the capability development team for Cosmos. He specializes in developing innovative tools that improve the quality of intelligence generated and processed through continuous penetration testing. Tom is the well-known author of numerous command-line tools, which can usually be leveraged together for security research, penetration testing, and bug bounty hunting. His contributions include open source projects such as gron, meg, and unfurl.

Tom is an active member of the information and cybersecurity community and has been a speaker at multiple events including the RSA Conference, BSides Leeds, Agile Yorkshire, the Sky Betting & Gaming Tech Talks, and Hey! Presents. He has also made guest appearances in popular podcasts and YouTube channels, such as HackerOne, Security Weekly, Undetected, STÖK, Web Development Tutorials, and his work has been featured in the Code Maven and Intigriti blogs. He was awarded a Most Valuable Hacker (MVH) belt at the h1-4420 live event in 2019.

Tom enjoys giving back to the community through mentoring and teaching. He has hosted multiple workshops, including a series of talks on cybercrime for UK police and investigators.

More by Tom Hudson

Extend Your Knowledge

Check out these related resources.

Workshops & Training

CloudFox in Action: Mapping Exploitable Paths in AWS

CloudFox in Action: Mapping Exploitable Paths in AWS

Watch as we explore Bishop Fox’s very own CloudFox, a command line tool that helps offensive security practitioners navigate unfamiliar cloud environments and find exploitable attack paths in cloud infrastructure. Tune in to our livestream for a demo of CloudFox!

Watch Workshop
Workshops & Training

13th B-Sides Las Vegas - ICS Security Assessments 101 or How da Fox I Test Dis?

13th B-Sides Las Vegas - ICS Security Assessments 101 or How da Fox I Test Dis?

We have seen many ICS attacks both in the news and in several talks at security conferences. They show how ICS protocols are insecure by default and how we can mess with control components so easily. However, from a consulting point of view, are we really asking our ICS clients to let us mess with their critical infrastructure just to show what we already know?

Watch Workshop
Datasheets

Attack Surface Discovery Datasheet

Attack Surface Discovery Datasheet

Internet-facing exposure is attackers’ number one way in, and most security teams cannot see all of theirs. Bishop Fox Attack Surface Discovery continuously finds, validates, and attributes your perimeter assets so you work from an inventory you can trust.

Download Datasheet