Ivan Kondratenko Email & Phone Number

Ivan Kondratenko is a Penetration Tester at Group-IB at Group-IB.

• 

  Penetration Tester

  Group-Ib

  Nov 2020 - Present

  Performed penetration tests and simulated cyber attacks to identifyand address potential security vulnerabilities, including:• Recon- Passive information gathering: mapping of assetsand domains, subdomain enumeration, scraping userinformation (emails, password leaks, phone numbers, etc.)- Active information gathering: dns querying, subdomain dnsbruteforce, port scanning, service fingerprinting• External penetration testing- Manual assessment of vulnerable… Show more Performed penetration tests and simulated cyber attacks to identifyand address potential security vulnerabilities, including:• Recon- Passive information gathering: mapping of assetsand domains, subdomain enumeration, scraping userinformation (emails, password leaks, phone numbers, etc.)- Active information gathering: dns querying, subdomain dnsbruteforce, port scanning, service fingerprinting• External penetration testing- Manual assessment of vulnerable services and exploitation- Password spraying, credential stuffing using informationgathered during recon• Internal penetration testing- Subnet scanning using masscan, nmap- Network sniffing and LAN attacks- Manual assessment of vulnerable services and exploitation- Active Directory and Kerberos: domain enumeration,trust and privilege mapping, common kerberos attacksand exploitation of misconfigurations, privilege escalation,domain persistence• On-site penetration testing of wireless networks- Packet sniffing and monitoring- Capturing and cracking WPA/WPA2 handshakes- Attacking WPS, WEP networks- Setting up and deploying rogue access point• Web Application Security Assessment- Assessing web applications for common RCE vulnerabilities(SQLi, Deserialization, LFI/RFI, etc.)- Testing web applications using the OWASP Top 10methodology • Social Engineering- Creating custom phishing scenarios based on informationgathered during recon - Configuring infrastructure for phishing attacks: setting upphishing domain and deploying phishing page throughCloudflare and Nginx• Programming and scripting on Bash, Python, C/C++ - Writing custom exploits, automated scripts for engagements Show less

• 

  Lomonosov Moscow State University (Msu)

  Computational Mathematics And Cybernetics