John Msigwa

Ambitious self-starter with more than 2 years of experience as an Information Security. Utilizes proven methodologies and tools, effective processes, and controls to guard against poor-quality data and security threats. Works exceptionally well individually or collaboratively with a first-class approach toward risk management. College graduate with a Degree in Computer Science specializing in Cyber Security.

I also posses strong computer programming skills that may be of great benefit to any organization.

Since i graduated with a diploma in information technology. I dove straight into ethical hacking.

Finding web application vulnerabilities and disclosing them so as to protect the integrity and confidential information of an organization.

Since ethical hacking  is a time consuming process, I have kept a log of all the research i have done on different types of computer systems and web applications.

I am currently enrolled at Trebas Institute pursuing a Diploma in Cyber Security Analyst to gain hands on more experience and knowledge on cyber security

At an  organization level i have prove to perform the following tasks successfully

• Using port scanning tools like Nmap or Nessus to scan an organization’s systems and find open ports. The vulnerabilities with each of these ports can be studied and remedial measures can be taken.
• Examining security patch installations and making sure that they can’t be exploited.
• Engaging in social engineering concepts such as dumpster diving—literally rummaging through trash cans for passwords, charts, sticky notes, or anything with crucial information that can be used to generate an attack.
• Employing other social engineering techniques like shoulder surfing to gain access to crucial information or playing the kindness card to trick employees to part with their passwords.
• Making attempts to evade IDS (Intrusion Detection systems), IPS (Intrusion Prevention systems), honeypots, and firewalls.
• Sniffing networks, bypassing and cracking wireless encryption, and hijacking web servers and web applications.