Daniel "unicornFurnace" Crowley
Summary
🤩
RockstarDaniel Crowley is a research-focused security leader with 11+ years of hands-on experience finding and exploiting flaws across web apps, cryptography, networks, and embedded/physical systems. As Research Director at IBM X-Force Red he directs application security delivery and original research, building on prior senior roles at NCC Group and SpiderLabs. He’s published unusual work—OS fingerprinting approaches, polyglot file-format techniques, and cryptanalysis tools—and has disclosed vulnerabilities in major platforms including Google’s CAPTCHA, PHP, Windows, nginx and various AV products. Creator of the Magical Code Injection Rainbow testbeds and cryptanalysis tooling (Cryptanalib and FeatherDuster), he pairs practical research with maintainable tooling (e.g., modernizing MCIR’s PHP DB stack). A prolific speaker and media source, he blends offensive creativity with mentorship and operational security program delivery. Off-duty he holds the playful title of Baron of Sealand, a hint at his appetite for unconventional exploration.
11 years of coding experience
Github Skills (4)
mysql10
php10
mysqli10
database-administration9
Programming languages (7)
Github contributions (5)
SpiderLabs/MCIR
Nov 2015 - May 2016
The Magical Code Injection Rainbow! MCIR is a framework for building configurable vulnerability testbeds. MCIR is also a collection of configurable vulnerability testbeds.
Role in this project:
Back-end Developer
Back-end DeveloperContributions:8 commits, 1 PR, 12 pushes in 6 months
Contributions summary:Daniel primarily focused on updating database connections within the PHP code, specifically transitioning from the deprecated `mysql` extension to `mysqli`. This involved modifying database configuration files and updating code within multiple challenge directories, improving compatibility. In addition, they also addressed the package dependency of PHP, updating to php5-mysqlnd in autoinstall.sh. These changes indicate a focus on maintaining and improving the codebase's compatibility and functionality.
code-injectionvulnerability
unicornsasfuel/cryptanalib3
Sep 2020 - Mar 2021
A Python3-compatible fork of the Cryptanalib module from FeatherDuster.
Contributions:1 release, 11 commits, 3 PRs in 5 months
python
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.