Skip to content
Building tools and tradecraft to help red and blue
Building tools and tradecraft to help red and blue


  • Pro


Block or Report

Block or report ZephrFish

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse

🔑 Intro:

Andy has been consulting in offensive security for over a decade, focusing on red teaming and simulated attacks with a side of threat intelligence and purple teaming. Leading engagements of varying sizes and lengths, helping grow teams and encourage risk-driven understanding.


✔️ Projects:

⌨️ Blog:

I post most of my research and other interesting tutorials on my blog

📚 Book:

For those that don't know Andy, he is a strong believer in passing knowledge on and supporting the infosec community he does this by providing tutorials on his blog running his local DEF CON Chapter & has also published a book Breaking into Information Security. He also helps out at DEF CON as a SOC Goon (Red Shirt) too each year (since DC25) assisting the SOC with operations and people flow.

🎤 Talks:






🏆 Bug Bounty:

📛 Badges

Andy has been in the IT security industry for just over eight years, currently holding CREST’s CCT Infrastructure certification which is highly sought-after, in addition he holds CHECK Team Leader status. He is also a Certified Red Team Operator. To back up his years in industry he also holds several other certifications and accolades including OSCP, OSWP.


  1. BurpFeed Public

    Hacked together script for feeding urls into Burp's Sitemap

    Python 79 22

  2. A collection of templates for bug bounty reporting

    293 90

  3. Wordlists Public

    Various Payload wordlists

    222 65

  4. Custom Queries - Brought Up to BH4.1 syntax

    106 21

  5. Random Shell Scripts and other ideas I have along the way

    PowerShell 47 30

  6. Scripts for Deploying new server

    Shell 42 18

499 contributions in the last year

Dec Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Mon Wed Fri
Activity overview

Contribution activity

December 2022

12 contributions in private repositories Dec 1 – Dec 8

Seeing something unexpected? Take a look at the GitHub profile guide.