As a seasoned Software Engineer and Cybersecurity professional, I specialize in creating secure, efficient, and innovative software solutions. I focus on application security, automation, and cloud technologies. Explore my work, insights, and the principles that guide my approach to security and software development.
Posts
-
Docker Multiple Platform Builds: Go and Cargo
Docker lets you build for multiple platforms (i.e. amd64 and arm64) in the same build process and publish a multi-platform build. Generally this requires an emulator in the docker process, like qemu, which isn’t difficult to do. However, some things will not compile correctly and are better done with cross compiling. For example: Go and Rust.
-
Cyber-AutoAgent-ng
The latest open source project I’ve been working on is a fork of the archived Cyber-AutoAgent. It is an offensive security agent with broad reasoning and goals at the top-level with plugable modules specifying more narrow targets. My fork is at https://github.com/double16/Cyber-AutoAgent-ng.
-
BloodHound Ephemeral Docker Container
If you use BloodHound, I maintain an ephemeral docker image that runs with Kasm or standalone. (I enjoy Kasm for many reasons, check it out sometime.) It has a quicker start-up time because I let the database initialize at build time rather than runtime.
-
Wild West Hackin' Fest 2026 - Denver
I was accepted for my first conference talk at Wild West Hackin’ Fest in Denver, CO!
-
Kasm Workspaces Offensive Toolset
TL;DR: I am currently using Kasm Workspaces, which is a containerized solution, for my offensive security toolset. It solves a lot of problems for me. In my GitHub repo I have an Ansible playbook to install it to 99% of what I need. Others should be able to use it with little customization.
-
Dual Booting Kali and Parrot
I recently acquired two monitors that included a laptop with it. I decided to use it as a disposable attack machine. Disposable in the sense that I can re-image it without data loss. Now, Kali or Parrot OS? I’ve been using HackTheBox pwnbox which is Parrot for a bit. How about both!
-
Creating Personas using AI
When working bug bounties, you’re going to create users. Some of the profile information can take a minute to think up, at least for me. Now, I’ve created an AI bot to create personas for me and they are pretty good. I get a name, billing and shipping address, username, password, fake credit card, personal interests, bio, tag lines, a resume and more.
-
AI Bot for Explaining Cookies
Artificial Intelligence (AI) gets a lot of attention. I was skeptical at first, but after using ChatGPT instead of DuckDuckGo, I was impressed. After asking for it to write some code for me, then I was really impressed. I recently watched Practical AI for Bounty Hunters. Wow.
-
Crawling Large Sites
I’ve been working on bug bounties and the tools I use for crawling HackTheBox machines do not scale well for large, public sites. These are a few things I’ve learned, and my methodology will improve as time goes on.
-
HackTheBox Sau Report
HackTheBox “Sau” Machine
Penetration Test Report -
HackTheBox Hospital Report
HackTheBox “Hospital” Machine
Penetration Test Report
subscribe via RSS