I run a website, https://oxasploits.com where I teach others about exploit development and other security topics.

Lead Content Writer

As the Assistant to the Network Administrator of my high school (I was an intern), my duties included networking, securing school networks, hardware repair,  software and OS installs (mostly Windows 2000 and Novell Networks based at the time).

Assistant Network Administrator

I run a Jekyll blog at oxasploits.com, and know a lot about building a website using this.  I also know how to custom edit themes/templates!

I have written many tools an exploits, as well as a IRC chat bot in perl over the years.

I know how to deploy similar configurations across many machines around a network autonomously making changes in parallel with Ansible!  I am knowledgeable about both Ansible setup and play/playbook writing.

I have a long history of experience in Linux, including dev and scripting.

I have many GitHub repositories and may be able to help you set one up.

I can help setup a web server on a Linux machine using Apache.

I have designed a OpenAI GPT 3.5 Turbo Instruct powered IRC chat bot named Franklin that is stable, useful, and entertaining.

I have many years of experience in security testing of websites and binaries, and even compete in capture the flag events such as PicoCTF where exploitation is necessary.

I am experienced in writing shell scripts in LInux (Bash), and Windows (PowerShell).  I have a working knowledge of pipes and file handles, moving data from one program to another, (stdin,stdout, sterr), and the respective language's internals such as if blocks and loops.

I have set up many standard and custom Wordpress sites on various platforms such as DigitalOcean and AWS.

I have a few DigitalOcean instances for my various servers.  One example is https://oxasploits.com.  I have experience setting up webservers, databases, wordpress, mailservers, etc on DO.

I can configure and deploy a iptables firewall on Linux and Windows

I have experience writing and editing bash and sh scripts on Linux.

I code in Python, and can help debug script issues, or convert scripts from 2.7 to 3, etc.

I have created many Graylog stacks for monitoring networks.  This includes setting up logstash, opensearch, elasticsearch, ulogd, syslog, and mongodb to tie it all together.

I have worked with bitcoin since the early days, including setting up hardware bitcoin mining systems.

I have experience with package managers, from apt, and yum, to portage and pacman!  I can usually figure out how to iron out strange dependency loops.

I have deployed many docker containers for both personal and professional projects, and I have generated my own docker image for one of my own projects, asnvif.

I have used Burpsuite (both community and professional) extensively to test websites for bugs, usually reporting them through bug bounty systems.

I have used Metasploit many times in my career in everything from demo videos, to bug bounty hunting.  I have also worked with Metasploit on the backend, programming custom modules in Ruby for the 5.x branch.

I have a lot of experience in virtualization and containers, and can help pick the correct virtualization solution and set it up.

Long time hacker that loves to share, code, and improve my own skills.

Marshall Whittaker

A fuzzer written in C++, designed to find vulnerabilities in C, and C++ codebases.  Basically guided brute force vulnerability assessment.

ansvif

A secure terminal paste utility.  Hosted at https://spaste.online you can use openssl s_client to paste securely to the server, then pull the paste back on another computer over HTTPS.  Pastes expire after 7 days.

SPaste

A collection of exploits I've written.  Most (not quite all) of the CVEs are to my name as well.

The oxasploits Github Archive

A custom password wordlist generator that takes things known about a user and generates statistically probable passwords.

MAPDAV

An alert system that ties into UPS monitoring software to script power events.

Personal details

Marshall W.

Summary

Technical skills

Work Experience

Personal Projects