Mariusz Banach
Lower Silesian Voivodeship, Poland
Summary
🤩
RockstarMariusz Banach is an offensive IT security analyst and Red Team operator with a decade of experience blending deep malware research, Windows post-exploitation, and software development to run adversarial simulations and Purple Team engagements. He has led threat-oriented assessments of complex Active Directory forests and large banking infrastructures, helping mature SOC/CSIRT detection and evaluate WAF/IPS/EDR/DLP controls. A prolific open-source contributor known for repositories like a 170+ tool Pentesting toolkit, Cobalt Strike scripts, and custom C2 integrations, he builds practical offensive tooling used widely by the community. His background includes authoring a malware analysis course, reverse-engineering polymorphic malware to ship real-world cleaners, and improving offensive frameworks such as SharpWMI and C3. Certified across multiple advanced offensive certifications (OSCP, OSCE, CRTP, CRTE, CREST CRT, eCPTX) he pairs formal mastery with hands-on exploitation craft. Outside work he’s an aspiring offshore sailor and craft-beer aficionado, a detail that underscores his taste for disciplined risk and technical hobbies.
10 years of coding experience
Github Skills (60)
shellcode10
json10
javascript10
c-language10
penetration-testing10
develop10
reverse-proxy10
scapy10
apidoc10
python10
wp-api10
wmi10
it-security10
browser-security10
winapi10
Programming languages (14)
Github contributions (5)
mgeeky/cobalt-arsenal
Apr 2020 - Jun 2022
My collection of battle-tested Aggressor Scripts for Cobalt Strike 4.0+
Role in this project:
Security Engineer
Security EngineerContributions:88 commits, 2 PRs, 71 pushes in 2 years 2 months
Contributions summary:Mariusz contributed several scripts and modules focused on red teaming and penetration testing tools. The primary focus appears to be on developing and adapting tools for use with Cobalt Strike, a popular red team framework. The contributions include a script to rename beacon tabs, PowerShell modules for SQL server exploitation, and integration of third-party tools such as SharpShares and Rubeus into the arsenal. The user's work emphasizes offensive security techniques and automation.
battle-testedbattleaggressor-scriptsstrikecobalt-strike
mgeeky/ThreadStackSpoofer
Sep 2021 - Jun 2022
Thread Stack Spoofing - PoC for an advanced In-Memory evasion technique allowing to better hide injected shellcode's memory allocation from scanners and analysts.
Role in this project:Security Engineer
Security EngineerContributions:3 releases, 53 commits, 2 PRs in 8 months
Contributions summary:Mariusz appears to be focused on security-related aspects of the project, specifically, implementing an in-memory evasion technique. The commits involve modifying the `MySleep` function to manipulate the call stack, making it more difficult for security scanners to detect injected shellcode. The user has reworked the original implementation to overwrite the return address of the `MySleep` function.
memorymemory-allocationanalystsshellcodeallocation
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.