EXPERIENCE
Melvin started as a C# Azure developer and integrations consultant after finishing his bachelor’s degree in computer engineering in 2018. During his time as a developer, he got hands-on experience with rapidly creating and deploying critical backend infrastructure for an international client base. It was during this period Melvin started to pursue his goal of transiting into offensive security. By the end of 2019, Melvin broke into the HackTheBox cybersecurity platform “Hall Of Fame” and successfully landed a job as a Penetration tester in January 2020. While working as a penetration tester, Melvin has contributed to the infosec community by releasing open-source and offensively-targeted C# based tools and techniques.
EDUCATION & CERTIFICATIONS
- Bachelor’s degree in computer engineering
- Certified Ethical Hacker (CEH)
- Certified Red Team Operator (CRTO)
- Offensive Security Certified Professional (OSCP)
INDUSTRY CONTRIBUTIONS
Melvin is an active blogger and developer of open-source C# based offensive tooling. In 2020 he held a talk about the “AMSI.fail” project at the RootCon conference and released multiple open-source tools such as BetterSafetyKatz, SharpAppLocker, and NetLoader. Melvin is also the creator and maintainer of the SharpCollection project, a project which utilizes Azure DevOps PipeLines to automatically released pre-compiled binaries of all significant offensive C# projects, triggered by updates from their respective master branch.
Featured Blogs And Resources
Discover the blogs, analysis, webinars, and podcasts by this team member.
The Triforce of Initial Access
Unlock the power of Microsoft Office with the ultimate Red Teaming toolkit, leveraging Evilginx, ROADtools, TeamFiltration, and Bobber to gain unparalleled…
Perspectives on AI in the Cybersecurity Industry in 2026
Join us for this exclusive webinar where our experts will decode the complex relationship between artificial intelligence and cybersecurity in 2026. What will…
Adventures in Primary Group Behavior, Reporting, and Exploitation
If you’ve administered Active Directory (AD) for any significant time, chances are you’ve come across the primaryGroupID attribute. Originally developed as a…
News 5 Cleveland - Social Security numbers may have been exposed in data breach connected to local car dealership
A Massillon car dealership reports that an unauthorized actor accessed its network, potentially exposing customer names and Social Security numbers. Advisory…
Colonel Clustered: Finding Outliers in Burp Intruder
TL;DR, gimme the goods: https://github.com/hoodoer/ColonelClusteredExtension has been submitted to the Bapp store, awaiting approval.This is a Burp Suite…
Discord Livestream - Crash Course: Building an Analysis Strategy
In this livestream, we will cover the components of an incident response attack plan from a high level —including scoping, building an analysis strategy,…
WWL First News with Tommy Tucker - What to know about the big Verizon outage on Wednesday
A widespread Verizon outage left many without service, sparking conversation about digital dependence. Advisory Solutions Director Alex Hamerstone joins WWL…
CMMC Scope – Understanding the Sprawl
The CMMC program contains complex, and potentially confusing, scope requirements. Contractors that are preparing for a CMMC assessment will need to pay close…
Tips for Incident Response Planning: Prepare Before Crisis Strikes
During our next webinar, our Incident Response experts will cover what organizations should do to prepare so they can respond quickly and be on the way to…
Updating the Sysmon Community Guide: Lessons Learned from the Front Lines
Over the past few weeks I’ve been spending a significant amount of time updating the Sysmon Community Guide. This wasn’t driven by theory, trends, or what…
Empower your business through better security design.
Talk directly with our experienced advisory consultants to learn how we can help.
