Kev Breen
Senior Director Cyber Threat Research
Bristol, England, United Kingdom
Summary
🤩
Rockstar🎓
Top SchoolKev Breen is a Senior Director of Cyber Threat Research with 13 years’ experience turning advanced threat intelligence into hands-on red/blue labs at ImmersiveLabs. He combines deep DFIR and malware analysis roots from the British Army and Leonardo with product-focused content leadership, building practical exercises that test real-world skills. An active open-source contributor, Kev has written MFT parsing plugins for Volatility3 and numerous RAT decoders for Viper and his own repositories, showcasing rare reverse-engineering and timeline-forensics expertise. His work spans backend tooling (PasteHunter, DuckToolkit) to threat-centric feature design, improving detection and automation for both practitioners and platforms. Based in Bristol, he balances technical leadership with community contributions and a persistent curiosity—often visible in sci-fi reads and experimental tooling.
13 years of coding experience
2 years of employment as a software developer
Salt Grammar School
Stackoverflow
181reputation
3kreached
4answers
0questions
Github Skills (37)
json10
filesystem10
main-memory10
python10
cybersecurity10
decode10
decoding10
security10
malware10
cryptography10
encoding10
encode10
reverse-engineering10
yara10
anti-malware10
Programming languages (15)
Github contributions (5)
kevthehermit/DuckToolkit
Aug 2016 - Dec 2021
Encoding Tools for Rubber Ducky
Role in this project:
Full-stack Developer
Full-stack DeveloperContributions:6 releases, 1 review, 22 commits in 5 years 4 months
Contributions summary:Kev primarily contributed to the `ducktoolkit` project, which involves encoding tools for the Rubber Ducky. Their work included implementing core functionalities for encoding and decoding Ducky scripts. Significant changes were made to `encoder.py`, `decoder.py`, and `ducktools.py` to enable encoding, decoding, and language support for different keyboard layouts. The user also refactored the codebase for PyPi installation and added bashbunny support.
rubberrubber-duckyencodingducky
kevthehermit/RATDecoders
Mar 2014 - Sep 2021
Python Decoders for Common Remote Access Trojans
Role in this project:Back-end Developer
Back-end DeveloperContributions:3 reviews, 161 commits, 36 PRs in 7 years 7 months
Contributions summary:Kev primarily contributed to the development of Python decoders for various Remote Access Trojans (RATs). Their work involved analyzing malware samples, extracting configuration data, and implementing decryption functions using libraries like `pefile`, `Crypto`, and custom RC4 implementations. The user demonstrated a deep understanding of reverse engineering and malware analysis by reverse engineering and creating multiple decoders for various RAT versions.
pythontrojansyarainfosecremote-access
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.