Cameron Wade

The business domains were commonly spoofed, and the security team wanted to find similar newly registered DNS names efficiently to combat spoofing.

I worked with our registrar vendor to track new domains similar to ours so that we could file abuse complaints and work with legal to have them removed. This action protected our brand and prevented our customers from falling into phishing attacks that appeared to be us. Additionally, I used DNSTwist and simplified the process with Python to search for domains, validate what the registrar found, and find other domains it may have missed.

I created an AWS organization to replace the on-premise services that the organization used. The AWS organization includes a landing zone with enterprise-level networking, Transit Gateway, VPN, GuardDuty, SecurityHub, CSPM, EKS, Lambda, CloudFront, and several other AWS services.

I needed a quick solution to move a route53 domain between AWS accounts. This solution was implemented using the AWS SDK (boto3) and can be run using a user or role with Route53 access.

Start by running the transfer.py with credentials for Account A and then run the accept.py with credentials for Account B.

When interviewing other clients, I wanted to be able to do a security challenge with the interviewee. I used the Damn Vulnerable Web App to challenge the interviewee with different OWASP Top 10 vulnerabilities.

Because I did not want to keep a DVWA hosted on the AWS infrastructure, I built this out in Terraform on AWS Elastic Container Service so it could be easily spun up and down for interviews.