Author Image

Hi, I'm Nate

Nathan May

Penetration Tester at Final Frontier Security

Passionate about all things cybersecurity, I enjoy taking every opportunity I can to learn and challenge myself. I have created this website to document new things I learn, projects I am working on, and writeups for competition challenges.

Offensive Security Experienced Professional
Offensive Security Certified Professional
Offensive Security Web Assessor
Offensive Security Wireless Professional
Red Team Operator
Practical IoT Pentest Associate

Competitions/CTFs

Experiences

1
Final Frontier Security

Feb 2025 - Present

Remote

Final Frontier Security specializes offensive security and penetration testing.

Senior Penetration Tester

Feb 2025 - Present

Responsibilities:
  • Lead and perform penetration tests for customers.
  • Specialized in phishing, internal assessments, and web application assessments.
UltraViolet Cyber / Stage 2 Security

Jan 2023 - Feb 2025

Remote

Started my career as a penetration tester at Stage 2 Security which soon became a part of merger with three other companies to create UltraViolet Cyber. UltraViolet Cyber prides itself on having strong red and blue team skills, providing customers insight from both sides of the industry.

Senior Penetration Tester

Nov 2024 - Feb 2025

Responsibilities:
  • Lead pentesting engagements and ensure projects are completed to high standards.
Penetration Tester

Jan 2023 - Nov 2024

Responsibilities:
  • Perform penetration tests for clients.
  • Assist with team tooling, process development, and automating tasks.
2
3
SecureStrux LLC

Jul 2020 - Dec 2022

Lancaster, PA

Securestrux is a cybersecurity company with deep roots in the DoD community. They provide specialized services in the areas of compliance, vulnerability management, cybersecurity strategies and engineering solutions.

Cybersecurity Analyst and Penetration Tester

May 2021 - Dec 2022

Responsibilities:
  • Perform security assessments for clients.
  • Assist with ACAS configuration.
  • Assist with Managed Security Service Provider (MSSP) clients.
Jr IT Systems Administration

Jul 2020 - May 2021

Responsibilities:
  • Assist with Managed Security Service Provider (MSSP) clients.
  • Design and configure network infrastructure.
  • Perform vulnerability assessments.
US Army National Guard

Nov 2017 - Nov 2023

Fort Belvoir, VA

The National Guard is a unique element of the U.S. military that serves both community and country. The Guard responds to domestic emergencies, overseas combat missions, counterdrug efforts, reconstruction missions and more.

Senior IT Specialist

May 2022 - Nov 2023

Responsibilities:
  • Lead other IT Specialists (25B) in configuring network/service stacks for the 29th ID.
  • Ensured soldiers needs were met and acted as proxy to senior leadership.
IT Specialist

Nov 2017 - May 2022

Responsibilities:
  • Set up and maintain satellite, ethernet and radio communications.
  • Configure networking stacks utilizing GRE tunneling, encryption, Palo Alto firewalls, and proxy services.
4
5
Brethren Village Retirement Community

Jun 2015 - Jan 2018

Lancaster, PA

Brethren Village is a retirement home for over 1,000 residents.

Technology Generalist

Jun 2015 - Jan 2018

Responsibilities:
  • Completed work orders for employees and residents.
  • Maintained provided services like internet, telephone, and television.
  • Upgraded/encrypted hardware and software of employee laptops.

Projects

Swakky
Swakky
Creator

Automate SMTP checks in large environments.

professional
Star
Nuclei 'Tings
Nuclei 'Tings
Creator

Some nuclei templates made to check all the things!

professional
Star
This Website :)
Creator

You’re lookin at it.

hobby
Star

Recent Posts

Hero Image
Malware Development #0

Brief Project Overview Malware development has been something that has interested me; however, most of my success in customer engagements has been due to using publicly available tooling, not my own work. This blog post will hopefully document my process into creating a custom HavocC2 loader bypassing several EDRs. Many topics on malware development exist, but I find that writing/teaching about a topic forces me to understand it more deeply.
Wednesday, December 10, 2025 | 3 minutes Read
Hero Image
OpenCanary

What is OpenCanary? OpenCanary is the free open source version of Canary, a popular and advanced honeypot. OpenCanary takes a different approach to intrusion detection. Instead of monitoring network traffic for known malicious actions and signatures, OpenCanary is system meant to be attractive to attackers that will alert an administrator when an attack is detected. Problems With Typical IDS If you have ever run an IDS like Snort, Suricata, Palo Alto, or similar, you know they flag a lot of traffic and make a lot of noise.
Monday, June 8, 2020 | 4 minutes Read
Hero Image
My PenTest+ Experience

About the PenTest+ Exam: The PenTest+ is among the more intermediate certifications offered by CompTIA and focuses primarily on penetration testing techniques and methodology. The exam has both practical hands on questions as well as traditional multiple choice questions to test both the knowledge and capability of testers. It is broken up into 5 primary sections Planning and Scoping - 15% Information Gathering and Vulnerability Scanning - 22% Attacks and Exploits - 30% Penetration Testing Tools - 17% Reporting and Communication - 16% For a quick comparison to other offensive side cyber certifications, it is generally regarded as being more difficult and hands on than the Certified Ethical Hacker (CEH), and less difficult/hands on than the eLearnSecurity Junior Penetration Tester (eJPT).
Monday, June 8, 2020 | 3 minutes Read