Duncan Woosley

My Specialty

My priority is to perform penetration testing with a high degree of vulnerability detection accuracy while demonstrating vulnerability impact through targeted exploitation. More importantly, I focus on delivering high quality reports that I can explain to all audience levels.

Professional Certifications

OffSec Experienced Penetration Testers (OSEPs) have the skills and expertise necessary to conduct penetration tests against hardened systems. They’ve proven their ability to identify more impactful intrusion opportunties and execute advanced, organized attacks in a controlled and focused manner.

OSEPOffSec Experienced Penetration Tester

An OSCP has demonstrated the ability to use persistence, creativity, and perceptiveness to identify vulnerabilities and execute organized attacks under tight time constraints. They can: Use information gathering techniques to identify and enumerate targets running various operating systems and services; Write scripts and tools to aid in the penetration testing process; Analyze, correct, modify, cross-compile, and port public exploit code; Conduct remote, local privilege escalation, and client-side attacks; Identify and exploit XSS, SQL injection, and file inclusion vulnerabilities in web applications; Leverage tunneling techniques to pivot between networks. OSCP holders have also shown they can think outside the box while managing both time and resources.

OSCPOffSec Certified Professional

The Certified Red Team Professional (CRTP) is a completely hands-on certification. To be certified, a student must solve practical and realistic challenges in our fully patched Windows infrastructure labs containing multiple Active Directory domains and forests with Server 2022 and above machines within 24 hours and submit a report. The certification challenges a student to compromise Active Directory by abusing features and functionalities without relying on patchable exploits.

CRTPCertified Red Team Professional

The GIAC Open Source Intelligence (GOSI) certification confirms that practitioners have a strong foundation in OSINT methodologies and frameworks and are well-versed in data collection, reporting, and analyzing targets.

GOSIGIAC Open Source Intelligence

The GIAC Security Essentials (GSEC) certification validates a practitioner's knowledge of information security beyond simple terminology and concepts. GSEC certification holders are demonstrating that they are qualified for hands-on IT systems roles with respect to security tasks.

GSECGIAC Security Essentials Certification

The GIAC Incident Handler (GCIH) certification validates a practitioner's ability to detect, respond, and resolve computer security incidents using a wide range of essential security skills. GCIH certification holders have the knowledge needed to manage security incidents by understanding common attack techniques, vectors and tools, as well as defend against and respond to such attacks when they occur.

GCIHGIAC Certified Incident Handler

Earners of the CompTIA PenTest+ certification have the knowledge and skills necessary to perform hands-on penetration testing to identify, exploit, report and manage vulnerabilities on a network. CompTIA PenTest+ professionals have demonstrated the hands-on ability and knowledge to find vulnerabilities in newer environments such as cloud and hybrid, web applications, embedded devices, as well as traditional desktops and servers. These skills help organizations comply to regulations.

Pentest+CompTIA PenTest+ ce

Earners of the CompTIA Security+ certification have the knowledge and skills necessary to perform core security functions required of any cybersecurity role. CompTIA Security+ professionals know how to identify and address potential threats, attacks and vulnerabilities and they have established techniques in risk management, risk mitigation, threat management and intrusion detection.

Security+CompTIA Security+ ce

Earners of this certification have a comprehensive understanding of AWS services and technologies. They demonstrated the ability to build secure and robust solutions using architectural design principles based on customer requirements. Badge owners are able to strategically design well-architected distributed systems that are scalable, resilient, efficient, and fault-tolerant.

AWS CSA(A)AWS Certified Solutions Architect – Associate

Earners of this certification have a fundamental understanding of IT services and their uses in the AWS Cloud. They demonstrated cloud fluency and foundational AWS knowledge. Badge owners are able to identify essential AWS services necessary to set up AWS-focused projects.

AWS CCPAWS Certified Cloud Practitioner

The GIAC Information Security Fundamentals (GISF) certification validates a practitioner's knowledge of security's foundation, computer functions and networking, introductory cryptography, and cybersecurity technologies. GISF certification holders will be able to demonstrate key concepts of information security including understanding the threats and risks to information and information resources and identifying best practices to protect them.

GISFGIAC Information Security Fundamentals

The GIAC Foundational Cybersecurity Technologies (GFACT) certification validates a practitioner's knowledge of essential foundational cybersecurity concepts. GFACT-certified professionals are familiar with practical skills in computers, technology, and security fundamentals that are needed to kickstart a career in cybersecurity.

GFACTGIAC Foundational Cybersecurity Technologies

Earners of CompTIA Network Vulnerability Assessment Professional (CNVP) certification have the knowledge and skills required to scan applications and systems to identify vulnerabilities that can be used as a blueprint for improvements.

CNVPCompTIA Network Vulnerability Assessment Professional (Stackable Certification)

Field Testing Experience

Network

Cloud

Physical

Wireless

Social Engineering

Network

The primary focus in my five years of penetration testing have been in testing at the network level. My background in network testing covers both the external and internal network perspective, particularly when Active Directory is involved. Many of the certifications I hold cover network and Active Directory testing like the OSEP, OSCP, and CRTP.

Cloud

I’ve tested many cloud based environments in my tenure as a penetration testing with my primary focus in AWS and Azure. The goal of the cloud assessments I’ve performed is to determine if an attacker can escalate privileges in the cloud by abusing the permission set of a common account. I’ve obtained a few AWS certifications like the AWS CCP and AWS CSA(A) to validate my understanding of the cloud for this testing format.

Physical

While working as a penetration tester, I’ve gotten the opportunity to train and test on physical side of security. Physical security penetration testing can vary widely in scope and purpose, but generally speaking it will involve testing the effectiveness of physical security controls via covert entry and social engineering. I am currently in the process of studying for the Red Team Alliance (RTA) Covert Entry Associate (CEA) certification after taking the RTA Covert Method of Entry (CMoE) course.

Wireless

Wireless network testing is often combined with physical security testing and on-site social engineering since it often requires the tester to be physically present at the target organization. I have conducted a handful of wireless penetration tests and assessments alongside physical security assessments as another means to break into the target organization’s network by searching for security misconfiguration in the wireless network from a nearby location.

Social Engineering

Just behind network penetration testing, social engineering is where I have the second most experience. I have conducted numerous phishing, vishing, and on-site impersonation social engineering tests. Additionally, I have a background setting up the infrastructure to support these engagements and bypass some spam detection on phishing engagements.

Speaking Engagements

SKYCTC Cybersafe Summit

October 24th, 2024