Jill Kamperides
Cybersecurity Consultant, Penetration Tester, Security Researcher
About Me
I entered cybersecurity in 2019 after being hired at a small consulting firm based on the South Shore of Massachusetts, OCD Tech, having just graduated from the University of Massachusetts Boston with an English degree. I was an entry level analyst assigned solely to a privileged access management program for an international bank, reconciling 1000s of Linux servers daily. After automating a large portion of that process with Python (in the pre-AI days), I was promoted to the penetration testing team.
In the years that have followed, I have acquired industry certifications, uncovered critical vulnerabilities (many of which are locked behind clients’ NDAs), registered CVEs, scraped 1 billion robots.txt entries from the worldwide web, presented at conferences, and had my work published in hacking magazines. I have grown, led, and mentored penetration testing teams, even spanning international borders.
I specialize in internal, external, web application, mobile application, and wireless penetration testing, along with social engineering and red teaming. Tangentially, I dabble in the RF space as both a licensed amateur radio operator (KD1AGW) and a satellite enthusiast. I am happy to share my projects, original writing, and research in this portfolio.
Writing & Publications
How I Captured Satellite Imagery From My Balcony
A beginner’s guide to receiving METEOR weather imagery with an SDR and SatDump
Windows Privilege Escalation: Hijacking Execution Flow
An introduction to the concepts of hijacking execution flow in Windows operating systems, and how these attacker techniques can lead to privilege escalation.
The Problem of Public S3 Buckets (And How to Secure Them)
What are the most common misconfigurations with S3 buckets, how can an attacker exploit these, and how can you stay protected?
The Best Thing You Can Do Is Implement Two-Factor Authentication...
"...The Worst Thing You Can Do Is Rely On It." Passwords alone just aren't good enough. Two-factor authentication is the new standard when it comes to access control, but even two-factor authentication can be bypassed. See how the OCD Tech team breezed by 2FA during a penetration test!
A Crash Course in Splunk and Security
An introduction to Splunk and how it can improve cybersecurity within your organization.
Don't Get Phished
What is social engineering, and why is it important?
Open-Source Projects
Look4Sat-rPi
Independent Raspberry Pi port of the Android app Look4Sat by rt-bishop. Cleanly track satellite passes on Raspberry Pi displays; touch screen compatible.
basic-oidc-scanner
A lightweight, unauthenticated vulnerability scanner for public OpenID Connect (OIDC) / OAuth 2.0 providers.
splittotext
Simple add-on for pdftotext that splits each page of a PDF into separate text files.
Security Research
CVE-2020-5132 · Internal Domain Disclosure in SonicWall SSL-VPN Login Portal
SonicWall SSL-VPN login portals expose internal domain names to unauthenticated users. Unregistered names under public TLDs can be purchased to capture leaked internal DNS traffic and credentials.
CVE-2020-13998 · User Enumeration in Citrix XenApp 6.5
With 2FA enabled, XenApp 6.5 shows its 2FA error page only for valid usernames, letting unauthenticated attackers enumerate users. End of life; no patch.
CVE-2020-12679 · Reflected Cross-Site Scripting in ShoreTel Conference Web Platform
The ShoreTel Conference Web Application (19.50.1000.0) reflects the path after home.php unsanitized, allowing arbitrary JavaScript and HTML injection. Fixed in MiVoice Connect 18.7 SP2.