Kevin Robertson
Information Security Consultant
Greater Philadelphia United States
Summary
🤩
Rockstar🎓
Top SchoolKevin Robertson is an information security consultant and seasoned red‑team operator with 11 years of hands‑on experience in offensive security, penetration testing, and AD exploitation. He has advanced through senior and leadership roles at NetSPI and X‑Force Red and now runs his own consultancy from the Greater Philadelphia area. A prolific open‑source contributor, Kevin develops PowerShell and .NET tooling used for network reconnaissance, NTLM capture/relay, DNS manipulation, and pass‑the‑hash techniques—work that underpins practical red‑team tradecraft like Empire and Inveigh. He combines deep protocol-level expertise (SMB, Kerberos, DNS, LLMNR/NBNS) with a toolkit mindset, often implementing interoperable features borrowed from external projects to enhance real-world engagement capabilities. Clients value his ability to turn offensive techniques into actionable assessments and defensive recommendations.
11 years of coding experience
9 years of employment as a software developer
B.S. in Computing and Security Technology Computing Security (CSEC), B.S. in Computing and Security Technology Computing Security (CSEC) at Drexel UniversityA.A.S. in Computer Systems, A.A.S. in Computer Systems at Salem Community College
Github Skills (33)
penetration-testing10
python10
kerberos10
net10
http10
audit10
dotnet10
smb10
pos10
ntlm10
security10
asp-net10
exploit10
exp10
active-directory10
Programming languages (3)
Github contributions (5)
Kevin-Robertson/Powermad
Sep 2017 - Jan 2023
PowerShell MachineAccountQuota and DNS exploit tools
Role in this project:
Back-end Developer & Security Engineer
Back-end Developer & Security EngineerContributions:22 commits, 2 PRs, 20 pushes in 5 years 5 months
Contributions summary:Kevin primarily focused on developing PowerShell-based tools for DNS manipulation and Active Directory interaction, specifically related to machine account management and exploitation. Contributions include the creation of the `Invoke-DNSUpdate` function for secure and nonsecure DNS updates using Kerberos GSS-TSIG, as well as the `Invoke-AgentSmith` function for exceeding the MachineAccountQuota limit. The user also added supporting functions and refined existing ones to enhance the functionality and maintainability of the Powermad tools.
powershellsecuritydnsexploit
Kevin-Robertson/Inveigh
Apr 2015 - Oct 2022
.NET IPv4/IPv6 machine-in-the-middle tool for penetration testers
Role in this project:Backend Developer
Backend DeveloperContributions:16 releases, 211 commits, 3 PRs in 7 years 7 months
Contributions summary:Kevin's contributions center around Inveigh, a .NET machine-in-the-middle tool. The commits indicate the user added and fixed features related to SMB and HTTP authentication attacks, focusing on NTLMv2 capture and relay. The user improved the tool's functionality by adding features such as SMB relay limiters, parameters for separate listening IPs, and an option for controlling output, demonstrating a strong understanding of network protocols and security. The user also worked on bug fixes and adjustments to improve the program's overall stability and performance.
ipv4testerspenetrationipv6ipv4-ipv6
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.