EXPERIENCE
Melvin started as a C# Azure developer and integrations consultant after finishing his bachelor’s degree in computer engineering in 2018. During his time as a developer, he got hands-on experience with rapidly creating and deploying critical backend infrastructure for an international client base. It was during this period Melvin started to pursue his goal of transiting into offensive security. By the end of 2019, Melvin broke into the HackTheBox cybersecurity platform “Hall Of Fame” and successfully landed a job as a Penetration tester in January 2020. While working as a penetration tester, Melvin has contributed to the infosec community by releasing open-source and offensively-targeted C# based tools and techniques.
EDUCATION & CERTIFICATIONS
- Bachelor’s degree in computer engineering
- Certified Ethical Hacker (CEH)
- Certified Red Team Operator (CRTO)
- Offensive Security Certified Professional (OSCP)
INDUSTRY CONTRIBUTIONS
Melvin is an active blogger and developer of open-source C# based offensive tooling. In 2020 he held a talk about the “AMSI.fail” project at the RootCon conference and released multiple open-source tools such as BetterSafetyKatz, SharpAppLocker, and NetLoader. Melvin is also the creator and maintainer of the SharpCollection project, a project which utilizes Azure DevOps PipeLines to automatically released pre-compiled binaries of all significant offensive C# projects, triggered by updates from their respective master branch.
Featured Blogs And Resources
Discover the blogs, analysis, webinars, and podcasts by this team member.
The Triforce of Initial Access
Unlock the power of Microsoft Office with the ultimate Red Teaming toolkit, leveraging Evilginx, ROADtools, TeamFiltration, and Bobber to gain unparalleled…
Tips for Incident Response Planning: Prepare Before Crisis Strikes
During our next webinar, our Incident Response experts will cover what organizations should do to prepare so they can respond quickly and be on the way to…
Inside the Modern Red Team: How Attackers Think, and What Defenders Miss
Discover how modern Red Teams think like attackers, what defenders often miss, and how to strengthen your cybersecurity posture.
Limiting Domain Controller Attack Surface: Why Less Services, Less Software, Less Agents = Less Exposure
Before we dive in, let’s get all the TrustedSec Certified Absolutes out of the way:All software presents some level of inherent risk.Only required software…
News 5 Cleveland - Elyria Police responded to a reported restaurant robbery. But it was actually an AI prank.
AI quality is evolving rapidly, making it easier than ever to create convincing fakes from a phone. Advisory Solutions Director Alex Hamerstone spoke with News…
Top 10 Blogs of 2025
Everyone has a year-end list, and this is ours. See what our top-performing cybersecurity blogs were in 2025, there could be some you might have missed!
News 5 Cleveland - Holiday Warning: Keeping your loved ones safe from scams
As the holidays approach, the most effective defense against fraud is an informed family. Advisory Solutions Director Alex Hamerstone spoke with News 5…
Security Advisory: React2Shell (CVE-2025-55182) - Critical RCE Vulnerability
A critical vulnerability affecting React Server Components (RSC) is being actively exploited. Here's what to look for and what to do next.
WWL First News with Tommy Tucker - Holiday scams are in full swing. Here's how to protect yourself
Don't let scammers ruin your holiday season. Advisory Solutions Director Alex Hamerstone joins WWL First News to discuss the most common seasonal scams and…
Holy Shuck! Weaponizing NTLM Hashes as a Wordlist
Password reuse is common in Active Directory (AD). From an attacker’s perspective, it is a reliable path to lateral movement or privilege escalation. Most IT…
Empower your business through better security design.
Talk directly with our experienced advisory consultants to learn how we can help.
