As the Managing Director ofAegis Cyber, a UK-based cyber security consultancy, Alexandre leads a team that provides a range of specialised services, including blockchain security, pentesting, and compliance. Aegis Cyber is committed to assisting modern IT companies in addressing their most challenging and bespoke cyber security issues.

Alexandre is a cyber security wizard with over 6 years of experience working with a diverse range of clients, from small businesses to large multinationals in industries such as banking and fintech. He's also lent his expertise to help secure sensitive digital assets for foreign countries.

When he's not defending against cyber threats, you can find him developing all sorts of offensive security tools that are widely used within the community. He holds certifications such as OSCP, OSWE & CREST, and is known for creatingpopular tools like BurpSuite plugins and WireSpy (which even got advertised onPentest Academy!).

Behold my badges of honor! 🎖️

Give my repositories some 💖 by giving them a ⭐️!

Here's just a sneak peek at my tech stack, but don't let that fool you, my skills go beyond what's on this list! 😏

PinnedLoading

1. wirespywirespyPublic

   Framework designed to automate various wireless networks attacks (the project was presented on Pentester Academy TV's toolbox in 2017).

   Shell 610 86

2. openapi-parseropenapi-parserPublic

   Parse OpenAPI documents into Burp Suite for automating OpenAPI-based APIs security assessments (approved by PortSwigger for inclusion in their official BApp Store).

   Java 198 53

3. scisciPublic

   Framework designed to automate the process of assembly code injection (trojanising) within Android applications.

   Smali 40 13

4. smbauditsmbauditPublic

   Perform various SMB-related attacks, particularly useful for testing large Active Directory environments.

   Shell 40 9

5. cve-2017-12945cve-2017-12945Public

   Exploit for CVE-2017-12945.

   Python 3 1

6. burpgptburpgptPublic

   A Burp Suite extension that integrates OpenAI's GPT to perform an additional passive scan for discovering highly bespoke vulnerabilities and enables running traffic-based analysis of any type.

   Java 2.1k 244