Hi, I'm Scott.

Welcome to my page!

./view_projects ./read_articles ./get_in_touch

projects

Things I've built

A few public projects. More repos are on the way to GitHub once I've reviewed them for credentials and secrets.

live

🛰️

DnsDaddy

A domain & DNS monitoring tool — keep an eye on records, changes, and configuration drift across the domains you care about.

DNS Monitoring Security

↗ dnsdaddy.xyz

soon

📦

More on GitHub

Several tools and scripts from client and personal work are headed to GitHub — going public once they've been scrubbed for credentials and secrets.

Tooling Scripts Coming soon

↗ github.com/ScottF1370

articles

Writing & research

Field notes from penetration tests and assessments — the misconfigurations and gaps I run into most, and how to close them.

published

📄 Guest article· ~7 min read

How to Prevent High-Risk Authentication Coercion Vulnerabilities

A deep dive into NTLM hash theft, LLMNR/NBNS poisoning, PetitPotam, DFSCoerce, and MSSQL coercion via xp_dirtree — plus the configs that stop them cold.

NTLM Active Directory Pentesting

→ Read on site ↗ Originally on Tripwire

article

📄 Email security· ~8 min read

DMARC Done Right: Strengthening Email Security Against Spoofing

Why so many organizations fail their DMARC check, how SPF + DKIM + DMARC actually fit together, a real-world spoofing scenario, and a copy-paste-ready policy.

DMARC SPF / DKIM Email Spoofing

→ Read on site

contact

Let's connect

scott@fingar:~$ ./connect --with-me

linkedin→ /in/scottfingar github→ /ScottF1370