EXPERIENCE
Kevin Clark is a member of the Targeted Operations team and has over five years of experience in penetration testing and offensive security roles. He has performed Red Team and penetration tests for large and small companies alike. Before TrustedSec, Kevin was a software developer focused on creating offensive security tools.
EDUCATION & CERTIFICATIONS
- Certified Red Team Operator (CRTO)
- Certified Red Team Lead (CRTL)
- Offensive Security Certified Professional (OSCP)
- Red Hat Certified System Administrator (RHCSA)
PROFESSIONAL AFFILIATIONS
Kevin is a contributor open-source security tools such as Metasploit and PowerShell Empire. He is also a training instructor at industry recognized conferences such as Black Hat and DefCon.
INDUSTRY CONTRIBUTIONS
Kevin maintains Ek47, an environmental keying payload encryptor for usage on Red Team engagements. He also maintains Badrats, a custom Command and Control (C2) tool designed for initial access.
PASSION FOR SECURITY
Kevin loves to share his skills and knowledge in the information security community. Outside of work, he is an adjunct teacher at Century College in White Bear Lake, Minnesota. He also hosts and writes blog posts about security-related topics at https://henpeebin.com/kevin/blog
Featured Blogs And Resources
Discover the blogs, analysis, webinars, and podcasts by this team member.
Operator's Guide to the Meterpreter BOFLoader
1.1 Introduction Recently, myself and a few friends decided to port my coworker Kevin Haubris' COFFLoader project to Metasploit. This new BOFLoader…
Welcome to 2018! A Meltdown and Spectre Run-Through
Welcome to 2018! It’s only been a few days into the new year and we already have newly named bugs, thanks to the Google Project Zero, Cyberus Technology, and…
2024 Conference Roundup
Join our panelists David Kennedy, Justin Elze, Jason Lang, and Oddvar Moe for their firsthand accounts and perspectives on what people were talking about at…
Operating Inside the Interpreted: Offensive Python
IntroductionEvery once in a while, I get the urge to go back and revisit older techniques that used to be popular but have fallen out of favor with the…
TrustedSec Tech Brief - January 2025
Carlos Perez walks us through several major vulnerabilities and patches from early January 2025, including a critical Fortinet FortiGate zero-day vulnerability.
Security Noise - Episode 7.9
On this episode of the Security Noise Podcast, we discuss user enumeration on Azure and "presence data" in Microsoft Teams with nyxgeek.
DOD Contract Compliance: DFARS 7012 and CMMC
Advisory Compliance Practice Lead Chris Camejo will take a deep dive into the Department of Defense requirements for protecting FCI and CUI.
Command Line Underdog: WMIC in Action
My typical engagements are mostly Red Teams, so I do not often get a chance to play with terminal server application breakouts—but on a recent engagement, I…
Solving NIST Password Complexities: Guidance From a GRC Perspective
Not another password change! Isn’t one (1) extra-long password enough? As a former Incident Response, Identity and Access Control, and Education and Awareness…
Security Noise - Episode 7.8
Farewell 2024
Empower your business through better security design.
Talk directly with our experienced advisory consultants to learn how we can help.
