Robert Graham
Owner at Errata Security
Portland, Oregon, United States
Summary
🤩
RockstarRobert Graham is a security-focused software engineer and founder with 14 years of experience running Errata Security from Portland, Oregon. He’s best known for high-impact open-source tooling—authoring masscan, and pioneering exploit/detection proofs like BlackICE, heartleech, and sidejacking—which reflect deep expertise in low-level networking, TCP/IP and SSL/TLS internals. His contributions show a knack for performance-driven engineering (PF_RING integration, raw socket work) and pragmatic vulnerability research, including BlueKeep and Heartbleed demonstrations. Equally comfortable writing exploit proof-of-concepts and production-grade scanners, he blends offensive security insight with systems-level coding to uncover and mitigate real-world risk.
14 years of coding experience
Github Skills (18)
ss10
ssl10
vulnerability10
sslv310
c-programming10
c1110
network-programming10
security10
c1710
exploit10
security-vulnerability10
openssl10
network-security10
vulnerabilities10
rdp9
Programming languages (5)
Github contributions (5)
robertdavidgraham/masscan
Jul 2013 - Sep 2021
TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.
Role in this project:
Back-end Developer
Back-end DeveloperContributions:6 releases, 593 commits, 124 PRs in 8 years 2 months
Contributions summary:Robert made a variety of changes to the `rawsock.c` file, indicating involvement in low-level network operations. The commits show a focus on integrating and utilizing the PF_RING library, suggesting efforts to optimize network performance. Additionally, the user made modifications to TCP/IP stack handling.
tcp-port
robertdavidgraham/rdpscan
May 2019 - Jun 2019
A quick scanner for the CVE-2019-0708 "BlueKeep" vulnerability.
Role in this project:Back-end Developer & Security Engineer
Back-end Developer & Security EngineerContributions:4 releases, 78 commits, 7 PRs in 16 days
Contributions summary:Robert primarily focused on the implementation and improvement of bitmap decompression routines within the rdesktop project. Their contributions involved the optimization and cleanup of existing code, which suggests a focus on improving the performance and maintainability of the codebase. The user has also addressed security vulnerabilities by implementing a check for the CVE-2019-0708 "BlueKeep" vulnerability.
vulnerability
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.