Ciarán Mcnally - Lead Security Researcher at Slándail Research Limited

Ciarán Mcnally

Lead Security Researcher at Slándail Research Limited

Dublin, Dublin 1, Ireland

Join Prog.AI to see contacts

Summary

🤩

Rockstar

🎓

Top School

Ciarán Mcnally is a Lead Security Researcher based in Dublin with 14 years of hands-on experience in offensive security, vulnerability research, and penetration testing. He combines formal certifications (OSCP, OSWE) with a prolific bug-hunting track record—ranked in the top 100 on HackerOne and Bugcrowd for multiple years—and ongoing advanced exploit development training. As a founder-level consultant and recent senior advisor at Dell, he blends entrepreneurial initiative with enterprise-grade vulnerability management and research practices. He is an autodidactic hacker who authors practical open-source tooling (e.g., parameth for parameter discovery) that emphasizes reliability in dynamic web testing. Comfortable leading teams or working solo, Ciarán brings a creative, problem-first approach and a taste for low-level exploit craft that informs scalable remediation strategies. Outside work he cultivates a distinct hacker ethos evident in both his public contributions and playful GitHub persona.

14 years of coding experience

7 years of employment as a software developer

Leaving Certificate Chemistry Biology History Art English Irish Mathematics, Leaving Certificate Chemistry Biology History Art English Irish Mathematics at Colaiste choilm swords

Professional Development Certificate Ethical Hacking and Information Security Services, Professional Development Certificate Ethical Hacking and Information Security Services at Technological University Dublin

Honours Bachelor of Science | BSc (Hons) Computer Applications & Software Engineering, Honours Bachelor of Science | BSc (Hons) Computer Applications & Software Engineering at Dublin City University

English, Irish

Github Skills (12)

web-security10

http10

python10

http-request10

apidoc9

api9

command-line-interface8

fuzzy-matching7

multiprocessing6

multi-process6

python-multiprocessing6

php5

Programming languages (3)

CGoPython

Github contributions (5)

maK-/parameth

Sep 2016 - Jan 2019

This tool can be used to brute discover GET and POST parameters

Role in this project:

Back-end Developer

Contributions:51 commits, 3 PRs, 50 pushes in 2 years 4 months

Contributions summary:Ciarán primarily contributed to a Python-based tool (`parameth.py`) designed for discovering GET and POST parameters. Their work involved adding features such as proxy support, cookie handling, timeout configurations, and the ability to ignore specific HTTP status codes and response sizes. The user also implemented Levenshtein distance to compare responses, indicating efforts to improve the tool's ability to detect changes in dynamic pages. Furthermore, the user made changes to a simple PHP script, likely as part of testing the parameter discovery tool.

discoverparameterspythonurl-parserbugbounty

maK-/maK_it-Linux-Rootkit

May 2014 - Oct 2019

This is a linux rootkit using many of the techniques described on

Contributions:7 commits, 1 PR, 3 pushes in 5 years 5 months

rootkittechniqueslinux

Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.

Request Free Trial