Brennon Thomas
Senior Security Researcher at Synack Red Team
San Antonio, Texas, United States
Summary
🤩
Rockstar🎓
Top SchoolBrennon Thomas is a Senior Security Researcher and founder with over a decade of hands-on experience applying automation and software engineering to hard security problems. Based in San Antonio, he blends deep offensive tradecraft from 17 years in information security with a builder’s mindset—creating tools, frameworks, and sustainable processes that make detection and defense more effective. At Arctic Wolf and as a contributor to Synack Red Team he turns high-level adversary models into operational solutions, and his open-source work (notably enhancing the pagodo GHDB scraper) shows practical expertise in Python, APIs, and backend automation. He runs Opsdisk LLC to prototype and publish reusable infosec tooling, favoring pragmatic automation like randomized user-agents and robust scraping logic to improve data quality. Educated at RPI and the Air Force Institute of Technology, Brennon pairs formal training with real-world CNO, hunt, and vuln analysis experience. A detail that sets him apart: he deliberately shifted from “breaking” to building, focusing on lasting, auditable security improvements rather than one-off exploits.
11 years of coding experience
Bachelor's Degree, Bachelor's Degree at Rensselaer Polytechnic InstituteMaster's Degree, Master's Degree at U.S. Air Force Institute of Technology
Github Skills (9)
beautifulsoup10
api10
python10
api-design10
http-request10
osi9
bug-tracker7
bugtracking7
bugzilla7
Programming languages (6)
Github contributions (5)
opsdisk/pagodo
Oct 2016 - Jan 2023
pagodo (Passive Google Dork) - Automate Google Hacking Database scraping and searching
Role in this project:
Back-end Developer
Back-end DeveloperContributions:12 releases, 2 reviews, 106 commits in 6 years 3 months
Contributions summary:Brennon primarily contributed to the `ghdb_scraper.py` and `pagodo.py` scripts, enhancing their functionality and maintainability. Their work involved updating the google module version, module imports, and adding features such as user-agent randomization, and fixing errors in the exploit-db.com scraping logic. These changes demonstrate an understanding of backend scripting and API interactions to efficiently gather and process data from the Google Hacking Database. They refactored the code for more concise and efficient execution.
google-dorkpythonbugbountygooglescraping
opsdisk/metagoofil
Oct 2015 - Oct 2022
Search Google and download specific file types
Contributions:1 release, 6 reviews, 55 commits in 7 years
pythongooglepenetration-testinggoogle-searchshodan
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.