BY DAY: Information Security Specialist at American Express looking for vulnerabilities to keep you safe.
BY NIGHT: Software magician working with some combination of bash/zsh, golang, ruby, and vim to scriptomagically make your life as a software developer easier. Here are some of my... tricks? illusions?
FOR FUN: bash/zsh, golang, ruby, vim, video games (gameboy emulators, love me some Pokemon)
"I see now that the circumstances of one's birth are irrelevant. It is what you do with the gift of life that determines who You are." -Mewtwo
"We do have a lot in common: the same earth, the same air, the same sky. Maybe if we started looking at what's the same instead of always looking at what's different, well, who knows?" -Meowth
Certifications:
Certified Red Team Professional (CRTP)
Offensive Security Certified Expert (OSCE)
Offensive Security Certified Professional (OSCP)
Offensive Security Wireless Professional (OSWP)
CCNA Routing and Switching (expired)
Likes: | bash c++ encryption git gitlab networking penetration-testing ruby security vim zsh |
Dislikes: | ada emacs python |
American Express Red Team
Security evaluations of AMEX infrastructure including internal and external services
Develop proof-of-concept exploits for non-trivial security vulnerabilities
Report detailed findings and any recommendations to the business unit
Advanced Security Initiatives Group (ASIG)
Security evaluations of Cisco products and services, both white-box and gray-box
Penetration tests of internal infrastructure
Develop proof-of-concept exploits for non-trivial security vulnerabilities
Communicate with business units to deliver findings and verify fixes are complete
Work with business units to ensure compliance with the Cisco Secure Development Lifecycle (CSDL)
Lead security evaluation team:
Simulations and Systems Integration Laboratories (SimSIL)
Security Clearance
Designed and developed:
This tool is for quickly generating a root CA and client/server certificates.
Art for your TTY
This ruby gem searches through provided directories, looking for private/public keys and certs. Then extracts, fingerprints, and attempts to match keys with certs.
RuAUR is a Ruby gem that allows searching and installing packages from the Pacman sync database as well as the Arch User Repository (AUR).
Ruby KeePass 2.x implementation. Currently it is read-only.
This Ruby gem accepts user input and handles commands (a.k.a. wishes). It dynamically loads user-defined wishes, maintains a history, and provides tab completion.
Do you like to search through code using ag, ack, grep, or pt? Good! This tool is for you! Zoom adds some convenience to ag/ack/grep/pt by allowing you to quickly open your search results in your editor of choice. When looking at large code-bases, it can be a pain to have to scroll to find the filename of each result. Zoom prints a tag number in front of each result that ag/ack/grep/pt outputs. Then you can quickly open that tag number with Zoom to jump straight to the source. Zoom is even persistent across all your sessions! You can search in one terminal and jump to a tag in another terminal from any directory!
This app allows you to write and run shell scripts. It has run as root capabilities if your android device is rooted. Easily import scripts from multiple directories and create new scripts in specified directories.
This app encrypts/decrypts text to be sent by other apps such as Gmail, SMS, Google Voice, etc. Implemented ciphers include: AES, Backwards, Caesar, DES, Hill, Monoalphabetic, Morse Code, Playfair, Reverse Alphabet, Triple DES, and Vignere.
Favorite Editor: | Vim |