How I got my first CVE published — CVE-2024–39248
It first started with a little exploration of a CMS software titled SimpCMS 0.1, which had its last release in October 2010 on SourceForge.
Jason Jacobs
Cybersecurity Consultant @J77 Cyber
Jason is a Cybersecurity Engineer and Dark Web Researcher who specializes in Offensive Security, Incident Response, and Open Source Intelligence for government and corporate cyber situations.
Based in Guyana, South America 📍
About me
Jason is a cybersecurity professional specializing in Offensive Security, Incident Response, and Open Source Intelligence for both government and corporate environments. His work combines hands-on penetration testing depth, including web application exploitation, defensive security, and OSINT tradecraft, with academic research focusing on Dark Web operations and threat intelligence.
Certifications
CompTIA Security+ 
INE eLearnSecurity Junior Penetration Tester (eJPT) 
INE eLearnSecurity Certified Professional Penetration Tester (eCPPT) 
INE eLearnSecurity Web Application Penetration Tester (eWPT) Skills
Explore the proficiencies that enable me to excel in cybersecurity and software development.
Vulnerability Assessment & Penetration Testing
Experienced in conducting comprehensive cybersecurity assessments to identify and mitigate potential threats.
Open-Source Intelligence
Skilled in gathering and analyzing data from various sources to identify emerging cybersecurity threats.
WordPress Security Audits
Proficient in assessing and enhancing the security of WordPress-based websites and applications.
Network Device Security
Experienced in reviewing and optimizing security configurations for network devices, including Fortinet products.
Office 365 Security Audits
Capable of assessing and improving security posture within Office 365 environments.
Amazon Web Services (AWS)
Experienced with EC2, Route 53, and AWS IAM services for cloud-based solutions.
LAMP Stack
Proficient in developing and securing applications using Linux, Apache, MySQL, and PHP.
Linux Administration
Skilled in managing and securing Linux-based systems and environments.
Cybersecurity Best Practices
Well-versed in implementing and maintaining strong cybersecurity measures across various platforms.
Find out more content in my Blog
View all posts »
A Guide to Subdomain Enumeration - From Passive to Active Methods
Learn comprehensive techniques for subdomain enumeration, covering both passive and active approaches for penetration testing scenarios.
FAQs
Frequently Asked Questions
Common questions about my cybersecurity consultancy services, assessments, and technical expertise.
What does a Vulnerability Assessment and Penetration Testing (VAPT) engagement involve?
A VAPT engagement involves a comprehensive review of your network and applications to identify vulnerabilities. I simulate real-world attacks to evaluate your security posture and provide a detailed report with actionable remediation steps to fortify your defenses.
How do you approach Open-Source Intelligence (OSINT) research?
My OSINT methodology involves gathering and analyzing publicly available data to identify potential threat vectors, data leaks, and exposed assets. This intelligence helps organizations proactively defend against emerging threats before they can be exploited.
What is included in your WordPress Security Audits?
I conduct in-depth reviews of WordPress installations, examining plugins, themes, and core configurations. This includes vulnerability scanning, malware detection, enforcing principle of least privilege, and implementing robust security headers to protect against common web exploits.
How can you help secure our Office 365 environment?
I audit your Office 365 tenant against industry best practices to prevent unauthorized access. This covers enforcing Multi-Factor Authentication (MFA), reviewing conditional access policies, analyzing mail flow rules for data exfiltration risks, and securing SharePoint/OneDrive permissions.
Do you provide security configuration reviews for AWS infrastructure?
Yes, I assess AWS environments focusing on Identity and Access Management (IAM), EC2 hardening, VPC configurations, and S3 bucket security. I ensure your cloud infrastructure adheres to the AWS Well-Architected Framework and CIS benchmarks.
Can you assist with hardening Linux servers and LAMP stack environments?
Absolutely. I specialize in Linux administration and securing the LAMP stack (Linux, Apache, MySQL, PHP). I implement strict firewall rules, disable unnecessary services, secure database configurations, and establish secure SSH access policies to minimize the attack surface.