Steve Jesso

Hands on and Technical Experience with the following programs and tools:

​

I work extensively with a wide range of cybersecurity and OSINT tools, including offensive platforms like Cobalt Strike, Sliver C2, Havoc, and Mythic, alongside credential access and post-exploitation tools such as Metasploit2, Mimikatz, Rubeus, John the Ripper, Hashcat, and Hydra.

 

My reconnaissance and scanning knowledge includes Nmap, Masscan, Nikto, Shodan, Burp Suite, and Wireshark, often paired with automation via Python and Bash. I’ve worked with and in some cases modified existing tools such as Ingram, BBot, RTSPBruter, and Seeker for RTSP streaming/IP camera exploitation, and frequently integrate Shodan CLI, and LDAPSearch into OSINT workflows. 

 

Additional utilities include Aircrack-ng, BloodHound/SharpHound, Ligolo-ng, GSocket, and Curl/Wget, as well as environment managers like Pyenv and Virtualenv.

​

​

Extracurricular Experience & Capture-the-Flag / Cybersecurity Labs

​

Hack The Box (HTB) Labs
Ongoing – Self-Directed

• HTB Pro Lab - Dante – In-Progress (25% complete)

• Starting Point complete (25 machines)

​
 

MetaCTF

Monthly – Self-Directed

Multiple participation's, averaging 4/5 submitted flags within 2 hour competition 

​

​