Luke Stephens
Director, Founder at HackerContent
Queensland, Australia
Summary
🤩
Rockstar🎓
Top SchoolLuke Stephens is a cybersecurity entrepreneur and engineer with a decade of hands-on experience building offensive tools and running security-focused businesses from Queensland, Australia. As founder of Haksec and HackerContent he blends penetration testing expertise with marketing and community-driven content to improve how the industry communicates technical risk. His open-source work includes practical reconnaissance tools—like the hakrawler crawler and hakoriginfinder for bypassing cloud WAFs—and proof-of-concept XSS payloads that demonstrate real-world exploitation and defensive gaps. Previously he led training and quality at Bugcrowd and delivered consultancy penetration tests at multiple boutique firms, combining practitioner rigor with program-level thinking. Luke holds an OSCP and an unconventional academic background in music, a combination that surfaces in creative, hacker-first approaches to problem solving and communication. He’s known for shipping small, focused security tools that prioritize speed, discoverability, and practical impact.
10 years of coding experience
2 years of employment as a software developer
The University of SydneyOSCP Information Security, OSCP Information Security at Offensive Security
Github Skills (28)
javascript10
web-crawler10
webscraper10
command-line-interface10
http10
url-parsing10
webscraping10
crawling10
security10
go10
xss10
crawler10
r9
bug-tracker9
levenshtein-distance9
Programming languages (11)
Github contributions (5)
hakluke/weaponised-XSS-payloads
May 2019 - Apr 2021
XSS payloads designed to turn alert(1) into P1
Role in this project:
Security Engineer
Security EngineerContributions:1 review, 22 commits, 5 PRs in 1 year 11 months
Contributions summary:Luke contributed XSS payloads designed to create new administrative users on Drupal and Wordpress platforms. They also provided a template for utilizing an iframe to bypass CSRF protections. The user further added a technique for staging external JavaScript code within a potentially vulnerable context. Minor refactoring and typo fixes were also included.
alertxssxss-payloadssecuritypayloads
hakluke/hakrawler
Dec 2019 - Oct 2022
Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application
Role in this project:Back-end Developer
Back-end DeveloperContributions:2 releases, 13 reviews, 166 commits in 2 years 10 months
Contributions summary:Luke primarily worked on implementing and enhancing features for a web crawler. They added support for collecting subdomains by manually parsing discovered URLs and integrated color-coded output for different data types. The user also added options to print specific data types, implemented the parsing of robots.txt and sitemap.xml, and added a waybackurls parser.
pythonscrapyweb-crawlerspiderbugbounty
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.