Brian Halbach
Senior Managing Consultant at Good Guy Hackers LLC
Minneapolis, Minnesota, United States
Summary
👤
Senior🎓
Top SchoolBrian Halbach is a Senior Managing Consultant and pragmatic security specialist with nine years of hands-on experience in network, application, API, Wi‑Fi, and physical penetration testing across healthcare, finance, manufacturing, retail, and public sectors. He combines technical depth from a Computer Science minor and Information Technology Management degree with business acumen to deliver creative, out-of-the-box solutions and risk-focused remediation. A longtime bug bounty hunter and researcher, Brian routinely uncovers issues ranging from SQL injection to DDE and has contributed to high-profile open-source tooling—authoring and refining a Metasploit module to enumerate Jira users and streamline credential reporting. Based in Minneapolis, he blends consultancy leadership with active offensive research, translating exploit discovery into repeatable, client-ready guidance. Notably, his background spans both offensive engineering and backend development, giving him a rare view of vulnerabilities from discovery through exploit and mitigation.
9 years of coding experience
8 years of employment as a software developer
Bachelor’s Degree Information Technology Management, Bachelor’s Degree Information Technology Management at University of Wisconsin-Stout
Stackoverflow
1reputation
0reached
0answers
0questions
Github Skills (12)
metasploit10
ruby10
audit10
exploit10
meta-framework10
auditing10
code-auditing10
audit-logging10
jira10
meta10
audit-trail10
http9
Programming languages (2)
Github contributions (5)
rapid7/metasploit-framework
Jan 2021 - Mar 2021
Metasploit Framework
Role in this project:
Back-end Developer & Security Engineer
Back-end Developer & Security EngineerContributions:5 reviews, 19 commits, 2 PRs in 2 months
Contributions summary:Brian primarily contributed to a Metasploit module designed to enumerate users in Jira. Their work involved initial module creation, subsequent updates and refactoring, and integration with the AuthBrute mixin. The contributions focused on exploiting an information disclosure vulnerability within Jira and involved adapting code from other modules. The final version incorporated enhancements for user credential reporting.
metasploitmetasploit-framework
Halbachb/metasploit-framework
Jan 2021 - Mar 2021
Metasploit Framework
Contributions:18 pushes, 2 branches in 2 months
metasploitmetasploit-framework
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.