Ewerson Guimaraes

email-iconphone-icongithub-logolinkedin-logotwitter-logostackoverflow-logofacebook-logo
Join Prog.AI to see contacts
email-iconphone-icongithub-logolinkedin-logotwitter-logostackoverflow-logofacebook-logo
Join Prog.AI to see contacts

Summary

👤
Senior
Ewerson Guimaraes is a Principal Security Engineer based in Berlin with 13 years of hands-on experience in offensive security, Red Team operations, and penetration testing across enterprise and industrial environments. Currently leading security efforts at Zalando and previously guiding teams at EPAM and ABB, he combines deep vulnerability research with practical exploit development—his Metasploit contributions include a module targeting Uptime software that enables file upload and remote code execution. A founder of the BHack Conference and longtime practitioner at DcLabs, he blends community leadership with real-world adversary techniques and privilege escalation expertise. He holds an MBA in CyberSecurity and a bachelor’s in Computer Science, reflecting a formal grounding paired with extensive field experience. Known for turning complex attack paths into repeatable assessments, he brings both strategic oversight and the ability to deliver proof-of-concept exploits.
code14 years of coding experience
github-logo-circle

Github Skills (6)

ruby10
vulnerabilities10
exploit10
vulnerability10
metasploit10
php8

Programming languages (5)

PowerShellJavaGoRubyPython

Github contributions (5)

github-logo-circle
rapid7/metasploit-framework

Aug 2012 - Oct 2015

Metasploit Framework
Role in this project:
userSecurity Engineer
Contributions:15 commits, 2 PRs, 6 comments in 3 years 2 months
Contributions summary:Ewerson's commits focus on a Metasploit module designed to exploit a vulnerability in Uptime software, specifically for versions 7.4.0 and 7.5.0. This module allows for file upload and arbitrary command execution, leveraging privilege escalation techniques. The changes involve modifications to the `uptime_code_exec.rb` file, which likely implements the exploit logic and interaction with the vulnerable Uptime instance.
metasploit
crashbrz/kalihealthcheck

Feb 2017 - Jan 2019

Contributions:28 commits, 2 PRs, 27 pushes in 1 year 10 months
configslinuxkali-linuxkalidotfiles
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.
Request Free Trial