EXPERIENCE
Lou has obtained several years of experience in information security roles by doing a variety of different tasks on both offense and defense including detection and monitoring, vulnerability management, and internal network and web application penetration testing. He initially spent three and a half years as a software developer before transitioning into an information security role.
EDUCATION & CERTIFICATIONS
- Bachelor of Science: Computer Science, The University of Akron
- GIAC Security Essentials (GSEC)
- Offensive Security Certified Professional (OSCP)
- Offensive Security Wireless Professional (OSWP)
- Offensive Security Certified Expert (OSCE)
- eLearnSecurity Web Application Penetration Tester (eWPT)
- GIAC Assessing and Auditing Wireless Networks (GAWN)
- Certified Red Team Operator (CRTO)
PASSION FOR SECURITY
For as long as Lou can remember, he has been fascinated with computers, and from a young age began tinkering with them and learning how to program. He has always had a drive to understand how things really work and what makes them tick. After learning that one can make a computer do things it wasn’t intended to do, he was hooked. This mindset, along with growing up watching movies like The Matrix and Hackers, fueled his interest in security and an endless pursuit of knowledge and continuous learning.
Featured Blogs And Resources
Discover the blogs, analysis, webinars, and podcasts by this consultant and their team.
Ask Me Anything: Pen Testing from a Hacker's Perspective
Join seasoned experts Adam Compton, Lou Scicchitano, and Justin Elze for an interactive discussion on penetration testing, covering real-world insights, best…
Two Config Files, Two Release Tracks, and One Very Bad Commit
Some of the best infrastructure improvements start with one bad afternoon. In the final part of this blog series, we walk through the configuration, release…
HashcatRosetta: Reading the Rosetta Stone of Password Cracking
Meet HashcatRosetta—the Hashcat rule decoder you didn't know you needed. In Part 2 of this blog series, we go through how it translates, analyzes, and…
What's New in hate_crack Since 2.0
You thought you knew hate_crack 👀 Well, version 2.0 changed that. In Part 1 of this latest blog series, we go through 13 new attack methods, menu…
SpooNMAP Grows Up: Findings, Local LLM Detection, and a Whole Lot Less Waiting
SpooNMAP used to hand you a list of open ports; the latest update tells you which ones actually matter. In this blog, we detail the new automated findings…
Pandora’s Container Part 1: Unpacking Azure Container Security
Azure container services are everywhere. Their attack surface? Often overlooked. In Part 1 of this blog series, we walk through offensive techniques targeting…
JQ for Hackers
Grey-bearded hackers and sysadmins still reaching for cut and CSV files, this one's for you. In this blog, we break down jq and why it's time to embrace JSON.
JS-Tap v3: Endpoint Post-Exploitation With JavaScript Implants
JavaScript escaped the browser. JS-Tap v3 followed it. In this blog, we introduce three new beacons targeting the Electron apps, browser extensions, and Node…
Kerberos with Titanis
In this article, I’ll walk you through the basics of Kerberos, how to use Titanis for the different parts, and how to mitigate some problems.Titanis SetupI use…
Benchmarking Self-Hosted LLMs for Offensive Security
We put LLMs to the test—let's find out how good AI is at hacking! We walk through six simple challenges with intentionally naïve setups to test how capable…
Empower your business through better security design.
Talk directly with our experienced advisory consultants to learn how we can help.
