Kevin Robertson
Information Security Consultant
Greater Philadelphia United States
Summary
🤩
Rockstar🎓
Top SchoolKevin Robertson is an information security consultant and seasoned red‑team operator with 11 years of hands‑on experience in offensive security, penetration testing, and AD exploitation. He has advanced through senior and leadership roles at NetSPI and X‑Force Red and now runs his own consultancy from the Greater Philadelphia area. A prolific open‑source contributor, Kevin develops PowerShell and .NET tooling used for network reconnaissance, NTLM capture/relay, DNS manipulation, and pass‑the‑hash techniques—work that underpins practical red‑team tradecraft like Empire and Inveigh. He combines deep protocol-level expertise (SMB, Kerberos, DNS, LLMNR/NBNS) with a toolkit mindset, often implementing interoperable features borrowed from external projects to enhance real-world engagement capabilities. Clients value his ability to turn offensive techniques into actionable assessments and defensive recommendations.
11 years of coding experience
9 years of employment as a software developer
B.S. in Computing and Security Technology, Computing Security (CSEC), B.S. in Computing and Security Technology, Computing Security (CSEC) at Drexel UniversityA.A.S. in Computer Systems, A.A.S. in Computer Systems at Salem Community College
Github Skills (34)
penetration-testing10
python10
kerberos10
net10
audit10
http10
dotnet10
point-of-sale10
smb10
pos10
ntlm10
security10
asp-net10
exploit10
exp10
Programming languages (3)
Github contributions (5)
Kevin-Robertson/Invoke-TheHash
Jan 2017 - Dec 2018
PowerShell Pass The Hash Utils
Role in this project:
Security Engineer
Security EngineerContributions:20 commits, 1 PR, 19 pushes in 1 year 11 months
Contributions summary:Kevin contributed significantly to the development of PowerShell-based tools for pass-the-hash (PTH) attacks and related SMB operations. They implemented and improved functionality for SMBExec and SMBClient, enabling credential-based access and file manipulation. The user also addressed vulnerabilities and added features to support long command execution and enhanced error handling within these tools. Additionally, they introduced an SMB enumeration tool, extending the toolkit's capabilities for reconnaissance.
powershell
Kevin-Robertson/Powermad
Sep 2017 - Jan 2023
PowerShell MachineAccountQuota and DNS exploit tools
Role in this project:Back-end Developer & Security Engineer
Back-end Developer & Security EngineerContributions:22 commits, 2 PRs, 20 pushes in 5 years 5 months
Contributions summary:Kevin primarily focused on developing PowerShell-based tools for DNS manipulation and Active Directory interaction, specifically related to machine account management and exploitation. Contributions include the creation of the `Invoke-DNSUpdate` function for secure and nonsecure DNS updates using Kerberos GSS-TSIG, as well as the `Invoke-AgentSmith` function for exceeding the MachineAccountQuota limit. The user also added supporting functions and refined existing ones to enhance the functionality and maintainability of the Powermad tools.
dnsexploitpowershell
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.