Lawrence Amer
Red Team & Ethical Hacker at Resillion
Utrecht, Utrecht, Netherlands
Summary
👤
Senior🎓
Top SchoolLawrence Amer is a Red Team and ethical hacking specialist with 11 years of hands-on experience in offensive security, advanced penetration testing, and privacy research, praised by major tech firms including Facebook, Microsoft, Yahoo and Sony. He has led Red Team engagements and built tooling at firms like PwC DarkLab and KPMG Nederland, and now operates at Resillion, blending advisory SME work with active adversary simulation. An active open-source contributor, he helped develop the 0xsp-Mongoose framework—adding Windows privilege-escalation detection, DNS-based C2 and interactive agent communications—to replicate advanced attacker tactics. Known in the bug-bounty community via HackerOne and Synack, he combines practical exploit development with repeatable testing frameworks. Based in Utrecht, he brings a curious, hacker-first mindset tempered by enterprise delivery and a knack for turning research findings into operational security controls.
11 years of coding experience
7 years of employment as a software developer
faculty of Science and Arts English Department, faculty of Science and Arts English Department at Damascus University
English, Arabic, Dutch
Stackoverflow
1reputation
236reached
0answers
1question
Github Skills (14)
windows10
red10
agent10
security-scan10
security-txt10
security10
webapi9
python9
dns9
api8
apim8
api-design8
php6
jquery6
Programming languages (10)
Github contributions (5)
zux0x3a/0xsp-Mongoose
Jun 2019 - Feb 2022
a unique framework for cybersecurity simulation and red teaming operations, windows auditing for newer vulnerabilities, misconfigurations and privilege escalations attacks, replicate the tactics and techniques of an advanced adversary in a network.
Role in this project:
Security Engineer
Security EngineerContributions:5 releases, 1 review, 110 commits in 2 years 8 months
Contributions summary:Lawrence focused on developing and integrating security-related features within the 0xsp-mongoose framework. Their contributions included adding a web application for agent communication and implementing vulnerability detection for Windows systems, specifically related to privilege escalation exploits (CVE-2020-1472). Additionally, the user enhanced the agent with interactive communication capabilities and implemented DNS-based command and control functionality.
0xsp-mongoosesimulationbackdoor-attacksmongoosemisconfigurations
lawrenceamer/lawrenceamer
Aug 2020 - Dec 2024
Contributions:12 pushes, 1 branch in 4 years 4 months
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.