Uses AWS Athena to query CloudTrail, VPC Flow Logs, S3 access logs,
Run authorized AWS penetration tests with Pacu, the open-source AWS exploitation
Analyze Content-Security-Policy headers and bypass them to achieve cross-site
Testing web applications for Cross-Site Request Forgery vulnerabilities
Test web applications for path traversal and Local/Remote File Inclusion
Performs digital forensics investigation on compromised endpoints including
Conduct a comprehensive external network penetration test to identify
Performs firmware image extraction and analysis using binwalk to identify
Performs coverage-guided fuzzing of compiled binaries with AFL++, instrumenting
Execute and test GraphQL depth limit attacks using deeply nested recursive
Cracks password hashes with Hashcat, covering hash-type identification,
Detects lateral movement techniques including Pass-the-Hash, PsExec,
Collect, parse, and correlate system, application, and security logs
Perform structured log source onboarding into SIEM platforms (Splunk,
Enrich malware file hashes (MD5, SHA-1, SHA-256) using the VirusTotal
Systematically investigate all persistence mechanisms on Windows and
Automate network traffic analysis using tshark (Wireshark CLI) and pyshark to compute protocol distribution statistics, detect suspicious…
Performs OAuth 2.0 scope minimization review to identify over-permissioned
Open Source Intelligence (OSINT) gathering is the first active phase
Monitor paste sites like Pastebin and GitHub Gists for leaked credentials,
Deploy and run authorized phishing awareness campaigns with GoPhish, covering admin panel setup, SMTP sending profiles, email template and…