Matthew Mathur
Senior Security Researcher at Fastly
Washington, District of Columbia, United States
Summary
🤩
Rockstar🎓
Top SchoolMatthew Mathur is a Senior Security Researcher with 11 years of experience blending vulnerability research, penetration testing, and software engineering to find and exploit real-world risks. Based in Washington, D.C., he researches new vulnerabilities, authors publications on active exploitation, and builds tooling to automate offensive techniques across networks and applications. A pragmatic open-source contributor, his Metasploit Framework work includes a notable Microsoft RDP Web Client login enumeration and scanning module that improved credential validation and integration with credential stores. He’s passionate about cybersecurity education and mentorship—holding an MEd focused on education and human development—which informs his clear reporting, POCs, and training of junior testers. Known for digging into internet traffic trends and practical attack emulation, he combines APT-style adversary modeling with production-grade engineering to drive better defenses.
11 years of coding experience
5 years of employment as a software developer
Master of Education - MEd Education and Human Development, Master of Education - MEd Education and Human Development at The George Washington UniversityBachelor of Science - BS Computer Science with concentration in Cyber Operations, Bachelor of Science - BS Computer Science with concentration in Cyber Operations at Northeastern UniversityAdvanced Regents Diploma with Honors, Advanced Regents Diploma with Honors at Smithtown High School West
Github Skills (8)
user-authentication10
authentication10
network-scan10
meta-framework10
python10
meta10
metasploit10
http9
Programming languages (8)
Github contributions (5)
rapid7/metasploit-framework
Dec 2020 - Jan 2023
Metasploit Framework
Role in this project:
Back-end Developer
Back-end DeveloperContributions:54 reviews, 55 commits, 11 PRs in 2 years
Contributions summary:Matthew contributed significantly to the Metasploit Framework, focusing on the creation and enhancement of a new module. Their work centered around a Microsoft RDP Web Client login enumeration module, initially focusing on basic username enumeration, then expanding to include domain discovery and the ability to read a file of usernames. Further enhancements allowed the module to act as a full login scanner and included features to verify service presence and support user agent customization. The user's work improved the ability to detect valid logins and incorporated it with the credentials database.
metasploitmetasploit-framework
k0pak4/metasploit-framework
Oct 2021 - Apr 2023
Metasploit Framework
Contributions:1 review, 1 PR, 74 pushes in 1 year 6 months
metasploitmetasploit-framework
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.