I am a pentester with eight years of cybersecurity experience. I help clients become safer by discovering flaws in their products/infrastructure and documenting the impact of those flaws. My speciality is the ability to translate technical language into business language. My passions lie in learning, building, doing, and improving.
January 2023 - Present
Remote
UltraViolet is a cybersecurity company that thrives at the intersection of red team and blue team skills.
April 2024 - Present
January 2023 - April 2024
June 2021 - March 2022
Remote
A premier Fortune 500® technology integrator focused on advancing the power of technology and innovation to serve and protect our world.
June 2021 - March 2022
June 2017 - February 2021
Gloucester City, NJ
A logistics company with almost a century of dedicated service, reliability, accountability, and innovation.
June 2017 - February 2021
Created a Python C2 Server with implants for both Windows and Linux.
An exam prep course for the (ISC)2 SSCP certification.
A course on Network Security.
WarRig is a tool used for automating payload generation. Runs on Golang and works with Terraform and Ansible to setup the environment. This is currently a work in progress.
CORGI stands for “CLoud Operator’s Recon & Gap Identifier”. This is a tool which can extract data from a ScoutSuite and AWS acounts to help speed up security assessments. This is currently a work in progress.
A wrapper for pentesting tools to help speed up/automate external assessments. Uses Channels/Workers for local use and Axiom (soon to be Argo flows) for large scopes.
Gave a talk on phishing and some of the advanced techniques I use at work. Aspects included SMTP Open Relays, Reverse Proxying, and the Bob Ross technique. Video will be uploaded to Youtube sometime soon.
Discovered multiple CVEs in AdPortal 3.0.39 by iPublish Media Solutions. Other versions may be affected. The vendor has been notified, but it is unclear if they will fix the issues.
Took a six month break from work to hike 2194.3 miles of the Appalachian National Scenic Trail. I learned a lot about myself and my capabilities. I also learned invaluable softskills which help me everyday at work.
Gave a talk on phishing and some of the advanced techniques I use at work. Aspects included reverse proxying, bot detection, SMTP relays, and Content Filtering Bypasses.