Ruben Boonen
Mobile Security Researcher at ▓▓▓▓▓
Spain
Summary
🤩
Rockstar🎓
Top SchoolRuben Boonen is a mobile security researcher and hands-on offensive specialist with a decade of experience building post-exploitation tooling, reverse engineering complex systems, and discovering memory-level vulnerabilities. He has led R&D and capability development for high-profile teams at IBM and FireEye and founded Calypso Heavy Industries to deliver bespoke offensive research to industry partners. Ruben’s open-source contributions span tooling used by the security community—PowerSploit, Capstone and Keystone bindings, and numerous post-exploitation suites—reflecting deep systems programming and Windows internals expertise. He combines kernel- and user-land exploit development with practical detection-focused research, often instrumenting ETW and Yara for operational monitoring. Based in Spain with a background in English literature and ancient philosophy from UC Berkeley, he brings an unusual blend of rigorous technical craft and scholarly curiosity to tough engineering problems.
10 years of coding experience
10 years of employment as a software developer
English Literature: John Milton, English Literature: John Milton at University of California, Berkeley
English, English, Dutch, French, German
Github Skills (51)
process-injection10
tokenize10
system-programming10
wp-api10
vulnerability10
etw10
net10
dotnet10
winapi10
x8610
security10
netframework10
binding10
asp-net10
tokenizer10
Programming languages (12)
Github contributions (5)
FuzzySecurity/Sharp-Suite
Dec 2018 - Dec 2022
Also known by Microsoft as Knifecoat :hot_pepper:
Role in this project:
Back-end Developer
Back-end DeveloperContributions:36 commits, 1 PR, 32 pushes in 4 years 1 month
Contributions summary:Ruben primarily contributed to the development of core functionalities related to system process and thread information, focusing on aspects like process details, thread information, and system processes. The commits showcase the user's involvement in gathering and displaying system-level data, including process names, IDs, parent process IDs, and thread-related metrics, using C# and potentially leveraging native APIs. The contributions suggest the user's focus on low-level system interaction and information retrieval.
axiomscriptingpeppermicrosoft
mandiant/SilkETW
Mar 2019 - Mar 2021
Role in this project:Back-end Developer & Security Engineer
Back-end Developer & Security EngineerContributions:3 releases, 8 commits, 8 pushes in 2 years
Contributions summary:Ruben contributed significantly to SilkETW, a tool for collecting ETW events. They introduced version updates, refactored existing code, fixed typos, and improved the event logging mechanism. The user also integrated Yara rules for threat detection and added output options like writing to event logs, indicating a focus on security and system monitoring. Moreover, they modified the service to address issues with event source retargeting and data truncation.
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.