Andrew Luke

Senior Consultant

Andrew Luke is a Senior Consultant at SpecterOps specializing in Adversary Simulation. He is also a support course instructor for Adversary Tactics: Red Team Operations. Areas of interests include Kubernetes, CI/CD, and application security.

See the latest by Andrew Luke

Research & Tradecraft

CiliumHound: Graphing Kubernetes Network Policies

TLDR: CiliumHound is a BloodHound OpenGraph extension for auditing Cilium network policies. It ingests a folder of JSON or YAML…

By: Andrew Luke

10 mins

Research & Tradecraft

Introducing TailscaleHound: Mapping Tailscale Attack Paths in BloodHound

TL;DR: TailscaleHound is an OpenGraph collector for BloodHound that maps Tailscale users, devices, groups, tags, ACLs, grants, SSH rules, routes,…

By: Andrew Luke, Andrew Gomez

12 mins

Research & Tradecraft

Leveling Up Secure Code Reviews with Claude Code

TL;DR: Claude Code is a force multiplier when performing secure code reviews during an assessment. In this post, we discuss…

By: Andrew Luke

18 mins

Research & Tradecraft

Leveraging Tailscale Keys

TL;DR: This post introduces red team operators to Tailscale concepts and tradecraft that can be leveraged in the reader compromises…

By: Andrew Luke

15 mins