Introduction

Hey, I am a Security Consultant that has done a lot of different thigns in my career. To start I have a long history of CTF Development and helping run competitions. From RTV CTF at DEFCON, NCAE Cybergames, Cactuscon, and Etc. I was doing this for roughly ~5 years before I started working at IBM. At IBM I mostly focused on web application security but was given oppurtunities to perform mainframe testing and AI testing aswell which both were rewarding in their own right to do. After that I moved over to Risk3Sixty which is where I flexed my development and AI capabilities by developing an AI report writer. This report writer was capable of writing a full report within 20ish minutes with little no human intervention. It had a sophisticated way error handling as well as how it cycled through the different agents to refine the report. All of this combined with a multi model approach to prioritize speed and efficiency made it a fulfilling project.

Certifications

• Offensive Security Certified Professional (OSCP)
• Certified Red Team Operator (CRTO)
• Offensive Security Web Expert (OSWE)

Things I had a hand in.

• Found the issue internally as I was messing with copilot.
  • https://risk3sixty.com/blog/exploiting-sharepoint-permissions-the-co-pilot-way
• Made the CTF challenge.
  • https://0xdf.gitlab.io/2022/02/07/funware-cactuscon-2022-ctf.html
• Made this challenge on HTB
  • https://app.hackthebox.com/challenges/Neonify