Dan Borges
Summary
👤
SeniorDaniel Borges is a seasoned security engineering leader with 12+ years of experience building and running red teams, offensive tools, and enterprise security programs, now serving as Head of Security Engineering at Scale AI. He blends deep hands-on development—evidenced by backend contributions to notable projects like the cross-platform Merlin C2 and multi-OS gscript framework—with strategic program building for detection, incident response, and secure engineering. Daniel's background spans elite firms (CrowdStrike, Mandiant) and high-growth tech (Uber), giving him a pragmatic view of adversary simulation, secure strategy, and quality-driven communication. Collected across roles from SOC analyst to startup CEO, he pairs cryptography and systems-level coding skills with an operator’s focus on measurable security outcomes. Notably, his open-source work shows a willingness to build offensive tooling responsibly to improve defensive posture.
12 years of coding experience
Github Skills (13)
http10
filesystem10
control-m10
go10
agent10
malware10
file-operations10
fileio10
security10
cli9
post9
golang9
exp9
Programming languages (11)
Github contributions (5)
gen0cide/gscript
Nov 2017 - Jul 2020
framework to rapidly implement custom droppers for all three major operating systems
Role in this project:
Back-end Developer & Security Engineer
Back-end Developer & Security EngineerContributions:160 commits, 105 PRs, 147 pushes in 2 years 8 months
Contributions summary:Dan primarily focused on developing and extending the functionality of the gscript framework, specifically implementing features for file manipulation and system interaction. Key contributions include adding functions for file copying, writing, deleting, appending, and replacing strings. They also integrated DNS and system information querying capabilities. The user's work strongly suggests an emphasis on building functionality related to security and potentially malicious code.
operating-systemsecuritycompilermalwarejavascript
Ne0nd0g/merlin
Dec 2017 - Feb 2019
Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.
Role in this project:Backend Developer
Backend DeveloperContributions:23 commits, 7 PRs, 9 comments in 1 year 1 month
Contributions summary:Dan primarily contributed to the backend functionality of the Merlin project, focusing on the agent and server components. Their work included implementing features such as beacon interval randomization, adding IP address retrieval to initial check-in messages, and incorporating a kill date for agents. Additionally, the user modified the server's logging and display text, updating the server to reflect the agent's information.
golanghttp2command-and-controlc2post-exploitation
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.