Author Image

Hi! I am Pete

Pete Cipolone

Pentester at UltraViolet Cyber

I am a pentester with eight years of cybersecurity experience. I help clients become safer by discovering flaws in their products/infrastructure and documenting the impact of those flaws. My speciality is the ability to translate technical language into business language. My passions lie in learning, building, doing, and improving.

Offensive Security Certified Professional
CISSP
SSCP
ARTE
Humility
Hard Working

Skills

Experiences

1
UltraViolet Cyber

January 2023 - Present

Remote

UltraViolet is a cybersecurity company that thrives at the intersection of red team and blue team skills.

Penetration Tester

April 2024 - Present

Responsibilities:
  • Lead tester on 14 penetration tests and assistant on another six tests in the areas of external, web application, internal, cloud, and social.
  • Found over 98 vulnerabilities with 17 being categorized as critical or high.
  • Communicated closely with clients from the kickoff call to the final out brief.
  • Developed or contributed to 20+ internal tools in the areas of phishing, payload testing, cloud, and external.
SOC Analyst and Shift Lead

January 2023 - April 2024

Responsibilities:
  • Monitored multiple client environments using CrowdStrike Falcon, IBM QRadar SOAR, Elastic, Extrahop, and a proprietary system mapped to the MITRE ATT&CK framework.
  • Writer of the weekly security bulletin.

SAIC

June 2021 - March 2022

Remote

A premier Fortune 500® technology integrator focused on advancing the power of technology and innovation to serve and protect our world.

SOC Analyst

June 2021 - March 2022

Responsibilities:
  • Event monitoring using Splunk Enterprise Security.
  • Assisted tier II in gathering data for threat intelligence reports on relevant cyber threat groups.
  • Created multiple Excel and PowerShell scripts to help research IP addresses and Windows event codes.
2

3
Holt Logistics

June 2017 - February 2021

Gloucester City, NJ

A logistics company with almost a century of dedicated service, reliability, accountability, and innovation.

Cybersecurity Analyst and Programmer

June 2017 - February 2021

Responsibilities:
  • Responsible for Email security using Fortinet, Barracuda, and Microsoft ATP.
  • Consistently resolving IT issues for approximately 300 end users.
  • Wrote over 70 software programs and scripts resulting in the savings of over 200 hours a year.

Education

B.Sc. Computer Science
GPA: 3.5 out of 4

Projects

Python C2 Server
Python C2 Server
Owner January 2024 - February 2024

Created a Python C2 Server with implants for both Windows and Linux.

Cybrary - SSCP Video Course
Cybrary - SSCP Video Course
Course Creator October 2018

An exam prep course for the (ISC)2 SSCP certification.

WarRig
builder December 2024 - Present

WarRig is a tool used for automating payload generation. Runs on Golang and works with Terraform and Ansible to setup the environment. This is currently a work in progress.

CORGI
builder May 2025 - Present

CORGI stands for “CLoud Operator’s Recon & Gap Identifier”. This is a tool which can extract data from a ScoutSuite and AWS acounts to help speed up security assessments. This is currently a work in progress.

Mutiny
builder September 2024 - Present

A wrapper for pentesting tools to help speed up/automate external assessments. Uses Channels/Workers for local use and Axiom (soon to be Argo flows) for large scopes.

Featured Posts

Recent Posts

Accomplishments

BSides Philadelphia Speaker
BSides December 2024

Gave a talk on phishing and some of the advanced techniques I use at work. Aspects included SMTP Open Relays, Reverse Proxying, and the Bob Ross technique. Video will be uploaded to Youtube sometime soon.

CVE-2024-50658, CVE-2024-50659, and CVE-2024-50660
Mitre Septmeber 2024

Discovered multiple CVEs in AdPortal 3.0.39 by iPublish Media Solutions. Other versions may be affected. The vendor has been notified, but it is unclear if they will fix the issues.

Appalachian Trail Thruhiker
Appalachian Trail March 2022 - September 2022

Took a six month break from work to hike 2194.3 miles of the Appalachian National Scenic Trail. I learned a lot about myself and my capabilities. I also learned invaluable softskills which help me everyday at work.

Cackalacky Con Speaker

Gave a talk on phishing and some of the advanced techniques I use at work. Aspects included reverse proxying, bot detection, SMTP relays, and Content Filtering Bypasses.