offensive security · open-source tooling · disclosures

Aaron Sullivan
ZerkerEOD

Penetration testing and security advisory by day. In the margins I build the tools I wish I had: KrakenHashes for cracking across a fleet, Porthole for driving coding agents from a phone over my own VPN, and Heimdall for the blue team.

offensive-securityaudit-and-advisorygo-toolingpassword-crackingdisclosures

$ ls projects $ cat blog

ZerkerEOD animated avatar
operator.confro
handle
ZerkerEOD
name
Aaron Sullivan, M.S.
focus
offensive security, audit and advisory
builds
3 open-source projects
writes
1 disclosure and counting
lang
Go · Dart · TypeScript · Python
stack
tmux · Hashcat · Cloudflare · Linux
links
github · x · linkedin

shell

A toy, but a working one. Try help, ls projects, cat krakenhashes, open porthole.

zerkereod@zerkersec: ~bash

featured projects

all projects →

latest writing

2024-10-20 · 6 min read Vulnerability Disclosure

Udemy - Account Takeover

What happens when security configurations do not work as intended: an MFA gap at Udemy that let a threat actor take over already-compromised accounts, with CVSS scoring and the disclosure timeline.

contact