Hunter Gregal
Sr. Android Vulnerability Researcher at Magnet Forensics
Washington DC-Baltimore Area United States
Summary
🤩
Rockstar🎓
Top SchoolHunter Gregal is a senior Android vulnerability researcher with 12 years of hands-on experience in offensive security, specializing in vulnerability research across source code, binaries, and logic analysis. Currently at Magnet Forensics, he has a proven track record building weaponized exploits, novel persistence techniques, and delivering mission-critical assessments for embedded, mobile, and enterprise targets from his time at Raytheon and specialist consultancies. Comfortable with C, Python, Linux internals, and multiple CPU architectures, he pairs deep technical expertise with polished reporting and client-facing briefings. An active CTF competitor (DEFCON and HackASat finals) and open-source contributor—authoring tools like mimipenguin for Linux credential extraction—he brings practical memory-analysis skills that go beyond standard pen‑testing. He prefers fast-paced, challenging remote roles where competitive problem solving and creative adversarial thinking are valued.
12 years of coding experience
6 years of employment as a software developer
Bachelor's Degree, Computer Networking and Cybersecurity, Bachelor's Degree, Computer Networking and Cybersecurity at Champlain CollegeHighschool Diploma, Allied Health & Medical Science, Highschool Diploma, Allied Health & Medical Science at Gloucester County Institute of Technology
English
Github Skills (13)
it-security10
memory-management10
memory-model10
linux10
exp10
memory-allocation10
point-of-sale10
bash10
reverse-engineering10
pos10
security10
apache9
ssh8
Programming languages (23)
Github contributions (5)
huntergregal/mimipenguin
Nov 2016 - Oct 2022
A tool to dump the login password from the current linux user
Role in this project:
Security Engineer
Security EngineerContributions:2 releases, 106 commits, 22 PRs in 5 years 11 months
Contributions summary:Hunter primarily contributed to a tool designed for password extraction from Linux systems. Their commits demonstrate an understanding of memory analysis and credential dumping. The user focused on improving the tool's efficiency, adding support for new services like VSFTPd and Apache2 HTTP Basic Auth, and correcting errors in password handling. They also made enhancements to the hash matching and added SSH sudo support.
linuxpost-exploitationpassword-extraction
huntergregal/huntergregal
Sep 2015 - Feb 2022
Contributions:50 commits, 60 pushes, 2 branches in 6 years 5 months
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.