Cory Shay
Senior Advisor at Archer Integrated Risk Management
Kansas City Metropolitan Area United States
Summary
👤
Senior🎓
Top SchoolCory Shay is a senior advisor and self-taught security-minded engineer with 11 years of experience building and hardening networked systems and developer tools. Based in the Kansas City area, he has hands-on device and firewall expertise from roles at FireMon and Depth Security and now focuses on risk and advisory work at Archer Integrated Risk Management. Cory combines backend and full-stack development skills with practical security engineering—contributing to open-source tools for subdomain enumeration, virtual host scanning, and iOS security testing where he improved robustness, parsing, and Frida integrations. He’s driven toward malware analysis and independent research, and his contributions show an ability to bridge low-level reverse-engineering concepts with production tooling and automation. Notably, he has a track record of making security tools more portable and testable, reducing friction for other researchers and operators.
11 years of coding experience
7 years of employment as a software developer
St. John's UniversitySt. Cloud State University
c#/.net, ruby, python, English
Stackoverflow
1,204reputation
89kreached
41answers
0questions
Github Skills (39)
ios10
pytest10
python10
package-management10
bug-tracker10
infosec10
setuptools10
enumeration10
testing10
frida10
security10
bug-reporting10
pentesting10
mobile10
enumerate10
Programming languages (12)
Github contributions (5)
TypeError/domained
Aug 2017 - Dec 2019
Multi Tool Subdomain Enumeration
Role in this project:
Security Engineer
Security EngineerContributions:14 commits, 6 PRs, 3 pushes in 2 years 4 months
Contributions summary:Cory primarily focused on enhancing the "domained" tool's functionality and robustness. They modified the script to allow execution from any location, improved argument parsing, and updated dependencies. Key contributions include integrating tools like Sublist3r, Amass, and subfinder for subdomain enumeration, including adding options for installation, and incorporating EyeWitness for visual reconnaissance. They also made improvements to error handling and added notification features.
bugbountysecurityinfosecsubdomainspentesting
codingo/VHostScan
Oct 2017 - Nov 2017
A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.
Role in this project:Full-stack Developer
Full-stack DeveloperContributions:6 commits, 2 PRs, 5 comments in 22 days
Contributions summary:Cory primarily focused on refactoring the project to work with the `setuptools` package and setup files, changing the directory structure, and modifying imports for relative paths. They updated the tests to ensure proper namespacing and enable test execution using `python setup.py test`. Furthermore, the user addressed installation issues by integrating `numpy` into both `install_requires` and `setup_requires` and adjusted the entry points for the command-line tool.
hacktheboxpenetration-testbugbountyscenariosdefault-pages
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.