Security tool builders explain their paths and their projects.
Sanoop Thomas talks one-on-one with people who build security tools, and he usually opens by asking how each guest found their way into information security. The conversations then get practical, from choosing Python because it is easy to get things done with, to scanning for secrets and explaining how prompt injection hijacks an LLM that is summarising an email.
PRESS PLAY
SecTools Podcast Series is an interview show from InfoSec Campus with a simple premise: talk to the people who write security tools. Sanoop Thomas hosts, and the conversations are one-on-one. He tends to begin in the same place, asking each guest how they found their way into information security, and the origin stories are rarely tidy. Attila Kalman's starts with a neighbour who was a bit too loud and a laptop running Kali. Andre Tenreiro traces his back to the mid-1990s, when he was fascinated by hackers who could trick systems, even before he had internet access. Ezz Tahoun remembers being the meme guy, focused on building social media ventures. Then the talk moves to the work. The technical stretches are where the show earns its time, because guests explain their choices in their own words. Donato Capitella walks through prompt injection step by step: an attacker sends an email, an application asks an LLM to summarise it, and the model follows instructions hidden in that email, down to a markdown image whose URL carries an encoded secret. Andre Tenreiro explains that he picked Python because he is a security professional rather than a programmer and wanted something easy to get things done with, and that the backend runs on AWS. Praveen Kanniah, whose tool was featured at Black Hat Arsenal in Asia, describes tackling secret scanning and phishing-domain scanning by building on existing open-source tools to reach a minimum viable product. Ezz Tahoun talks about temporal graph embeddings and about university research, including at the University of Windsor, that he says made the work cheap enough to no longer need a supercomputer. Some of it is simply fun. Attila Kalman describes running NetHunter on a smartwatch and experimenting with an Android car radio. Career paths come up as well, with Jayesh Singh Chauhan recalling his time as Sprinklr's first official security person and learning to balance leadership with hands-on work. The host's questions stay close to the builder's point of view: which hardware to target, why a stack was chosen, what ships next, such as the regex search support Andre Tenreiro plans to add. Several conversations end with advice for people still learning. Keep experimenting and stay open to new experiences; get hands-on with AI; use GPT to learn rather than as a shortcut. As a place to start, 'SecTools Podcast E56 with Donato Capitella' suits anyone curious about LLM security, and 'SecTools Podcast E53 with Praveen Kanniah' suits those drawn to recon.
Made for: Suits a listener who works with or around security tooling and wants to hear builders explain their technical choices, along with how they got into the field.
What sets it apart: Every conversation centres on someone who builds a security tool. It moves from a personal origin story to concrete build decisions, like language choice, the backend, and which open-source pieces to rely on.
SecTools Podcast is a series of audio podcast featuring free or opensource tool authors from Information Security industry, sharing their interesting experience on developing and maintaining amazing tools for the security community. Hosted by Sanoop Thomas (s4n7h0)https://infoseccampus.comhttps://twitter.com/InfoSecCampus
Sanoop Thomas asks about time travel debugging; you get a corrupted stack with a rewind button.
Press play if you want
Short reviews from the PlayNext desk, based on the episodes we processed.
A grounded look at YesIMXF's path from Kali curiosity to NetHunter experiments across phones, watches, car radios, and wearables.
SecTools Podcast E58 follows YesIMXF, author of NetHunter, as he traces a route from early Kali Linux experiments to spotting Kali NetHunter in Firefox and wondering what it could become.
A grounded cloud-security conversation about moving into leadership while staying close to the work.
Cloud security opens into a wider look at how security careers get built in public. On SecTools Podcast E57, Sanu Thomas speaks with Jaish about his route into information security, with Jaish tracing work through Sprinklr and Akamai before moving into hands-on testing, hiring,…
A grounded look at prompt injection, jailbreaks, and testing LLM applications with Spiky Tool.
Prompt injection gets a concrete workout as SecTools host Sanup Thomas and Donato Capitilla, author of Spiky Tool, unpack how untrusted documents can influence an application-prompted LLM.
A practical look at OpenScot's Python, serverless AWS, and low-maintenance cybersecurity design choices.
OpenScot gives SecTools Podcast E55 a grounded technology angle, led by a cybersecurity professional whose interest in the field reaches back to the mid-90s and a long-running curiosity about how systems can be fooled.
A breach-born security career leads into temporal graph research and an open-source project looking for a wider community.
The episode traces a security career back to a high-school social-media venture, SAT memes and comics, and a meme-delivered remote access Trojan.
Specialists walking through software's tradeoffs, one system at a time.
Founders and engineers on AI coding agents like Claude Code, and supply chain security.
SecTools Podcast episode 58 features Sanuk Thomas talking with YesIMXF, the NetHunter author, about how Kali NetHunter has expanded from rooted Android phones to watches and car infotainment systems.
["SecTools Podcast episode 57 has host Sanu Thomas and guest Jayesh Singh Chauhan tracing a path from PayPal's pool table to cloud security.", "Jayesh says Null community meetups helped him beat stage fear, and Akash Marjan's advice to teach in order to learn pushed him into beginner talks.", "He moves from Cognizant and PayPal development work to AppSec QA, then to PwC and Sprinklr, where he becomes the first security person and later works on cloud questions.", "The episode centers on Cloud Security Suite, built with Shivankar from misconfiguration checks on AWS and other cloud services, and on Cloud Village, which started at DEF CON in 2019."]
SecTools podcast episode 56 pairs host Sanup Thomas with Donato Capitella, author of Spiky Tool, for a technical discussion of LLM security and prompt injection.
SecTools Podcast E55 features Andri Tenreiro, author of OpenScot, discussing how his interest in cybersecurity began before his first internet access in 1996 or 1997.
SecTools Podcast Series episode 54 with host Sanup Thomas and guest Ezz Tahoun opens with a high-school meme that carried a remote-access Trojan into Tahoun's social media venture.
SecTools Podcast E53 features Sanob Thomas interviewing Praveen Kaniya about Mantis, an open-source framework for external asset discovery, reconnaissance, scanning, and alerts.
Duncan Ogilvie tells Sanup Thomas that he began working on x64dbg at age 16 as a high-school graduation project after finding 64-bit debugging tools inadequate.
SecTools Podcast E51 features Sanup Thomas interviewing Dimitrios Valsamaras, a Microsoft security researcher and author of Medusa.
Angelina Suboi explains how aerospace security became the intersection of her software-development background, hardware hacking, piloting, and NASA experience.
SecTools Podcast E49 features Sanubh Thomas interviewing Gailie Deng, a Nanyang Technological University PhD student and PentestGPT creator, about automating penetration testing with GPT-4.
Abhishek Dutta recounts starting in information security through IRC and dial-up internet in Kolkata around 1998 or 1999, then meeting the founders of Ivis through IRC.
Tim Misiak recounts moving from Microsoft internships and VMware hypervisor work to leading the WinDbg team and then starting an AI-focused developer collaboration company.
Sanup Thomas interviews Thomas Rochia about a decade-long InfoSec career spanning incident response, penetration testing, malware analysis, and threat intelligence at McAfee and Microsoft.
SecTools Podcast E45 features Erlen Vitas, creator of Retire.js, discussing how outdated front-end libraries became a security problem after third-party components gained prominence in the OWASP Top 10.
SecTools Podcast E44 features Jeff Foley, author of the AMASS project, discussing attack-surface mapping, internet exposure, and open-source security development.
SecTools Podcast episode 43 features host Sanubh Thomas interviewing Ananth Iwari, author of ArcherySec, about entering information security and maintaining an open-source security platform.
Host Sanoop Thomas interviews application security engineer Ajin Ibrahim about his journey into infosec and open source tool development.
Interview with Imran about his DevSecOps Studio project and his journey in information security.
Host Sanoop Thomas interviews Yanis Ioannidis about his open-source security tool WarberryPi and his journey in information security.
Host Sanoop Thomas introduces the SecTools Podcast, aiming to connect InfoSec enthusiasts with tool authors to share experiences and encourage community learning.