Aeyoss Antelope Email & Phone Number

Aeyoss Antelope is a Security Consultant at Antelope @AeyossYrt at Antelope.

• 

  Consultant

  Antelope

  Oct 2014 - Present

  Currently engaged with clients utilizing:PentestingMetasploitKaliPythoniOSCobalt StrikeMimiKatzComplianceActive Directory-----------------------------------Enterprise/Active Directory- simulate pass-the-hash vulnerability- used Mimikatz to test for “Golden Ticket” vulnerability- use Metasploit for exploitation tests (e.g. MS08-067)- run Kali environment on “burner laptop”- use meterpreter for post-exploitation pivoting- used “Lan Turtle” in Social Engineering test cases- review machine patch compliance- use PowerShell Empire for memory-only execution- check machines for permission elevationWeb- use sqlmap for injection threat analysis- check for untrusted and unsigned certs- simulate account management hacks (e.g enumeration)- use Burp to proxy web requests- check cookies for session IDs- test CSRF using hacked “remember me” button- validate use of anti-forgery token- examine OAuth “bearer tokens”- use Python to simulate “credential stuffing”- use of Chrome DevTools for cookie exploitation- examine server logs for leakageMobile- use Fiddler to proxy API flows- install jailbreak exploit for iOS v8.4- manipulate iOS executable runtime- test “cert pinning”- automated brute force testing of login pinCoding- review C# code for use of “Dynamic SQL” injection risk- use PowerShell for REST invocation hacking- conduct code reviews of login modules- determine risk for insufficient parameter validationCloud- Create PowerShell scripts for IAM provisioning/configuration- Setup of accounts and development environment for Azure, WAAD- PowerShell orchestration of AWS infrastructure provisioning