Cody Zacharias
Founder at LaserSell
Miami, Florida, United States
Summary
🤩
Rockstar
Top expert inCross-Platform Social Media & Messaging Automation
Cody Zacharias is a security-focused founder and engineer with nine years of hands-on experience in application security, penetration testing, and exploit/tool development. He spent over four years on HackerOne’s triage team validating and contextualizing real-world vulnerability reports, and has run startups that deliver supply chain and vulnerability monitoring services. An active open-source contributor, Cody helped build notable tools like subjack (subdomain takeover detection in Go) and contributed core scraping and parsing functionality to the Twint project. He combines curiosity-driven research—public zero-day work and bug bounty participation—with practical product-building and secure code review. Based in Miami, he pairs technical mentorship and community engagement with an outdoorsy, travel-oriented lifestyle that informs his collaborative approach. Notably, his work blends offensive research instincts with an emphasis on clear communication between hackers and security teams.
9 years of coding experience
3 years of employment as a software developer
English
Github Skills (23)
json10
python10
bash10
beautifulsoup10
webscraping10
security10
go10
aiohttp10
scripting9
infosec9
bug-tracker9
bug-reporting9
golang9
pentest9
bugtracking9
Programming languages (2)
Github contributions (5)
haccer/subjack
Oct 2017 - Nov 2020
Subdomain Takeover tool written in Go
Role in this project:
Back-end & Security Engineer
Back-end & Security EngineerContributions:8 releases, 170 commits, 12 PRs in 3 years 1 month
Contributions summary:Cody primarily contributed to the development of the core functionality of the subdomain takeover tool. Their commits include the creation and updates to shell scripts used for subdomain enumeration and CNAME record lookup, and the creation of the primary tool `subjack.go`. The user also made improvements such as removing color and added CloudFront checks, as well as added a JSON output option. This indicates a focus on both functionality and identifying potential security vulnerabilities.
golangbugbountysecurityinfosecgo
twintproject/twint
Jun 2017 - Mar 2021
An advanced Twitter scraping & OSINT tool written in Python that doesn't use Twitter's API, allowing you to scrape a user's followers, following, Tweets and more while evading most API limitations.
Role in this project:Back-end Developer
Back-end DeveloperContributions:4 releases, 592 commits, 33 PRs in 3 years 9 months
Contributions summary:Cody primarily contributed to the development of the `tweep.py` script, which appears to be the core functionality of the project. They implemented and updated features related to web scraping Twitter, including URL generation, feed retrieval, and tweet parsing. The user added functionalities like filtering tweets based on criteria, saving images, and saving output to CSV files. Additionally, they refactored the code for Python 3 compatibility.
pythonapi-skibanascrapingosint
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.