Stephen Scribner Email & Phone Number

Houston, Tx, Us

Huntsville, Alabama, United States

Remote

* Used industry standard tools to perform cybersecurity analysis on various virtual environments designed to simulate the real-world everyday function of servers and applications. * Used Nmap and Metasploit to discover services running on a server, map them to vulnerabilities, and exploit them. Exploitation of FTPs anonymous login to gain access to sensitive files and SSH with hydra by brute forcing. Exploited other network service misconfigurations such as SMB and Telnet. * Actively used enumeration tools such as Dirb/Dirbusgter and GoBuster to discover hidden directories vulnerable to authentication bypass and/or other webapp vulnerabilities such as malicious file upload, XSS, SQLi, directory traversal, SSRF and XXE. Explored various methods of Linux privilege escalation such as abusing sudo rights/shell escape, weak file permissions, SUIDs, badly configured cron jobs, etc * Explored various methods of Windows privilege escalation such as scheduling custom events to execute with SYSTEM privileges, AlwaysInstallElevated, unquoted service paths, insecure GUI applications, saved credentials, etc. * Identified software versions and mapped them to publicly available vulnerabilities so as to exploit them.

Extensive Penetration Testing Capstone Project -High level reconnaissance, enumeration, vulnerability scanning, threat assessment and reporting. -Experience working with tools such as Shodan.io, Nmap, BurpSuite, Wireshark, Nessus, OpenVas, GitHub, Maltego, and vulnerability scripts. -Detailed technical and executive reporting on critical and high level vulnerabilities and prioritized remediation guidelines. Other Completed Projects : System HardeningDesktop VirtualizationSmall Lab DesignZero-Trust PresentationTechnical Security AssessmentSoftware TestSecurity AssessmentSOC Strategy PresentationComputer Forensic LabPython for CybersecurityAWS PCI DSSPowerShell for CybersecuritySocial EngineeringThe Software Development LifecycleWeb Application Vulnerability RemediationTopics Covered: Network scanning toolsPacket capture and log analysisSIEM technologyIDS and IPS administrationThreat intelligenceVulnerability assessmentsIncident responseDigital ForensicsKali LinuxIT Project ManagementHost-Based SecurityNetwork SecurityIdentity and Access ManagementSecurity Assessment and TestingSecurity Operations

The Woodlands, Texas, United States

Underwrote and audited flood insurance policies for mortgages in flood hazard areasHandled escalations and services recoveries Used strong attention to detail to ensure policies met guidelinesExemplified strong multitasking and time management assisting team members while accomplishing personal tasks

Education record

A 380+ hour online cybersecurity course that covers threat modeling, host-based security, network security, identity and access.

Biology, 3.87