David Padron
Cyber Threat Intelligence | OSINT Pentester | Ethical Hacking
# Your Digital Identity
IP: SCANNING...
Location: SCANNING...
Browser: SCANNING...
Device: SCANNING...
Language: SCANNING...
┏━[feathers@mcgr4w]-[~/]
┗━>
aboutme
Cyber Threat Intelligence Analyst with experience in offensive OSINT, advanced attack surface reconnaissance, and collaboration with Red Team operations focused on security assessments, web application pentesting, and cyber intelligence activities.
Specialized in intelligence collection through both open-source (OSINT) and restricted sources, web infrastructure mapping, attack vector identification, and vulnerability classification using CVE frameworks.
Experienced in developing custom Bash and Python tools for vulnerability exploitation, data scraping, and automation scripting. Perform corporate intelligence operations, people investigation, digital footprint analysis, image intelligence (IMINT), social media intelligence (SOCMINT), phishing sites campaign monitoring, and threat actor forum intelligence to support brand protection and security initiatives.
Experience
Cyber Intelligence Analyst
Pentesting Al Palo
Dec 2025 – PresentComputer Security Instructor
Encode S.A
May 2025 – Jul 2025Cyber Threat Intelligence Analyst
Pentesting Al Palo
Jan 2024 – PresentIT Support Technician
Autonomous
Mar 2020 – Dec 2024VIEW CV
┏━[feathers@mcgr4w]-[~/]
┗━>
stack
Operating Systems
Debian Linux
Kali Linux
Raspberry OS
Windows
Scripting Languages
Bash
Python
Javascript
C
SQL
Pentesting
BurpSuite
Nmap
ProjectDiscovery
Wfuuz
Espoofer
OSINT
Spiderfoot
Fofa
Sherlock
Holehe
Ghunt
Threat Intelligence
VirusTotal
URLScan
OpenCTI
Maltego
Gephi
Hacking Forums
BreachForums
DarkForum
Onion Sites
Telegram
X/Twitter
Malware Analysis
ProcMon
FakeNet
Detect It Easy
Ghidra
Malcat
Frameworks
MITRE ATT&CK
MITRE CVE
FIRST CVSS
OWASP
NIST 800-53
┏━[feathers@mcgr4w]-[~/]
┗━>
projects
Co Founder at Pentesting Al Palo Cybersecurity Team
Red Team that provides offensive security services, web pentesting, consulting and security testing in software development.
Corporate Intelligence Pentesting Recon
Intelligence report on recognition of the network attack surface of the company Cooperativa Eléctrica de Monte LTDA
Corporate Intelligence Pentesting Recon
Intelligence report on recognition of the network attack surface of the company Grupo Mexx S.R.L
Intelligence and People Research
Intelligence report on Investigation of people linked to sexual harassment and abuse in the Province of Bs.As
Intelligence and People Research
Intelligence report on investigation of executive personnel of the company Cooperativa Eléctrica de Monte LTDA
OSINT Linkedin Employees
Python script to search for empleyees on Linkedin for a company using a domain.
OSINT Email Employees
Python script to search for emails from a specific domain and subdomians.
Tor Web Scraper
Tool created in Python to exploit web systems vulnerable to IDORs through the Tor network.
┏━[feathers@mcgr4w]-[~/]
┗━>
certs
Introduction to Cybersecurity
Cyber threats, attacks and vulnerabilities. Analyze and mitigate threats.
Networking Basics
Types of networks, network communication, Routing, wireless connectivity. IPv4 - IPv6.
Networking Devices
Virtualization and Cloud Services, TCP, UDP, Sockets, ARP, ND, DNS DHCP, Cisco IOS, Cisco Devices.
Endpoint Security
Network security, analyze network traffic, network threats, operating systems, Firewalls, IPS, IDS, ACLs, EDR.
Network Defense
Security architecture, Firewalls-Rules, Firewals-ZPF, Routers-ACLs, Cloud Security, cryptography, alert analysis.
Cyber Threat Management
Governance, ISO 27000, Penetration Tests, Threat Intelligence, CVE, Mitre ATTACK & CK, Risk Management, CSIRT.
Dynamic malware analysis under Windows
Process Monitor, Process Explorer, AutoRuns, Fakenet-ng, Eset SysInspector, Registry Explorer, Regshot, Hyper-Analysis, VirusTotal.
Static malware analysis under Windows
Detect It Easy (DIE), Dependency Walker, PeStudio, pdfStreamDumper, OleTools, Ghidra, Malcat.
Osint y Cybercrime - Ivan Castañeda
1.Forums, Telegram, Deep Web, 2.OSINT social media: profiling, IMINT, metadata, 3.Infostealers: Combolists y ULP, 4.Bots maliciosos: phishing, scraping, c2, 5.Phishing sites campaing: URLs, redirect, hash, domains, 6.Python Scripting: Python scripts for OSINT, Telegram tracking system, iplogger or grabify system, Scripts for bot detection, Geolocation system in X
Advanced techniques in Cyber Intelligence (TACINT)
1.Intelligence Sources, 2.OSINT Sources, 3.OPSEC Environment, 4.TTPs Threat Agents, 5.Digital Threat Monitoring, 6.Deanonymization Techniques, 7.Fingerprint, 8.Cyberprofiling, 9.IMINT, 10.SOCMINT, 11.Exif Metadata, 12.Big Data OSINT, 13. Telegram Monitoring, Deep Web Networks, Cybercrime Forums, 14. Blockchain Analysis, 15. Maritime and Air Traffic Analysis
HACK THE BOX
Resolution of 20 laboratories easy difficulty and medium level where technical skills of: IDORs, API Enumeration, Command Injection, File Upload Bypass, SSRF, SSTI, XSS Stored, WPA Pin brute force, SQL Injection, LFI, Auth Bypass, Broken Parser Logic, API Explotation, SUID Capability, CVE-2023-0386, CVE-2022-37706, Crack id_rsa hash, Forency device USB, CVE-2022-24439, CVE-2023-2640, Docker Breakouts, LXD Abuse, Sysytemctl misconfig.
┏━[feathers@mcgr4w]-[~/]
┗━>
events
Ekoparty Security Conference 2024
Ekoparty largest computer security conference in Latin America.
Ekoparty Security Conference 2025
Ekoparty largest computer security conference in Latin America.
┏━[feathers@mcgr4w]-[~/]
┗━>
myblog
