Steven Borosh is a penetration tester for Veris Group's Adaptive Threat Division, with several years' experience in physical and network security. Steve performs numerous penetration tests for our commercial and government clients, and his expertise includes network, web application and cloud system penetration testing. With his experience, Steve has developed many of the tools and techniques used by the Veris Group's ATD and other industry professionals including Egress-Assess. In addition, Steve participates in several public bug bounty programs, identifying security flaws in a large array of widely adopted applications. He actively participates in the information security community as an avid blogger and contributes to several open source tools.
Rohan Vazarkar is a penetration tester and developer for Veris Group's Adaptive Threat Division, who performs numerous penetration tests for our commercial and government clients. Rohan specializes in researching Microsoft security bulletins and releases tactics for leveraging security weaknesses in Windows based platforms. He published a tool and blog post that took advantage of MS14-068, a privilege escalation tactic used in Windows Active Directory network environments. In addition, Rohan is also a co-author of BloodHound, a tool designed to reveal the hidden and unintended permission relationships in Active Directory domains.