
Joshua Murrell
Joshua is a Senior Security Consultant that is responsible for performing penetration tests for a variety of customers. He has a wide range of experience with specializations in ExPen, InPen, M365, and Azure Breach and Attack Simulation. Joshua has multiple industry certifications including OSWP, OSCP, OSWE, CRTO, and OSEP.
More By Joshua Murrell

Forbes: Update Windows Now — Microsoft Confirms System Takeover Danger
June 17, 2025
Forbes covered Microsoft’s critical Windows vulnerabilities which can enable system takeover. The story included insight from NetSPI senior security consultant, Joshua Murrell.
Learn More

Network Pentesting
CVE-2025-26685 – Spoofing to Elevate Privileges with Microsoft Defender for Identity
June 12, 2025
Discover how NetSPI uncovered and reported a vulnerability in Microsoft Defender for Identity that allowed unauthenticated attackers to perform spoofing and elevate privileges.
Learn More

AI/ML Pentesting
Exploiting a Generative AI Chatbot – Prompt Injection to Remote Code Execution (RCE)
July 16, 2024
Discover how NetSPI exploits an externally exposed Generative AI Chatbot to compromise the hosting server.
Learn More

Cloud Pentesting
Elevating Privileges with Azure Site Recovery Services
March 28, 2024
Discover how NetSPI uncovered and reported a Microsoft-managed Azure Site Recovery service vulnerability and how the finding was remediated.
Learn More