Skip to content
View ghosthermes's full-sized avatar
0 followers · 5 following

Block or report ghosthermes

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
ghosthermes/README.md

Raven Fritz

Technical Generalist & Systems Automation

Portland, OR (Remote) | Bugcrowd | ravenfritz98@gmail.com

I investigate production failures and build the tools to fix them.

I specialize in rapid prototyping and technical investigation. I use AI-assisted workflows to accelerate implementation, then manually verify, test, and harden systems for reliability. When an API breaks or a deployment crashes, I trace failures to their source and engineer practical fixes.

What I Do

  • Investigate ambiguous production failures
  • Build internal automation tools for non-technical teams
  • Conduct adversarial testing on web applications
  • Design AI-assisted workflows with strict deterministic constraints

Featured Work: adtech-forensics-engine

(GitHub: ghosthermes/adtech-forensics-engine) Stack: Playwright | Python | SQLite

I built this tool under a 48-hour legal deadline to generate reproducible forensic evidence of consentless tracking behavior.

  • Evidentiary Integrity: Captures HAR files with hash verification and UTC-synchronized timestamps.
  • Adversarial Probing: Programmatically triggers blur event listeners to force data exfiltration before a user submits a form.
  • Consent Mapping: Compares initialization states against tracker firing times to prove unauthorized data collection.

This project demonstrates how I operate. I took a rigid legal requirement, mapped out the evasion tactics used by modern trackers, and delivered a production-ready QA tool.

Professional Experience

Systems & Hardware Administrator Student Cooperative Association | Portland, OR (Remote) | Feb 2025 to May 2026

  • Built secure infrastructure for a multi-building residential network.
  • Configured Android devices with GrapheneOS to deploy privacy-centric community hardware.
  • Automated daily operations by integrating HubSpot, Zapier, and local payment gateways.
  • Handled bare-metal data recovery and hardware troubleshooting.

Independent Vulnerability Researcher Remote | Bugcrowd, HackenProof, Immunefi | 2022 to Present

  • Identified authentication weaknesses in a banking platform through header manipulation techniques, exposing internal operational data.
  • Exploited inconsistent error codes in an automotive API to leak state data.
  • Dumped API schemas into local LLMs to recognize patterns, then manually verified the leads.

IT Escalation Contractor Remote | Upwork | 2021 to 2024

  • Audited small business websites to locate unpatched vulnerabilities and access control flaws.
  • Wrote Python scripts to automate routine server maintenance.

Technical Tooling

  • Working proficiency: Python, Bash.
  • Comfortable debugging and modifying: Rust, JavaScript.
  • Environments: Arch Linux, Windows Server, Proxmox.
  • Security: Burp Suite, Playwright, ffuf.

Looking For

Remote opportunities involving automation, QA infrastructure, security testing, developer tooling, or technical operations. I am particularly interested in early-stage startups where broad technical ownership is valued.

Popular repositories Loading

  1. ghosthermes ghosthermes Public

    Pentester and Bug Bounty Hunter

  2. adtech-forensics-engine adtech-forensics-engine Public

    Headless Playwright-based framework for generating defensible, reproducible forensic HAR captures for privacy litigation and ad-tech compliance auditing.

    Python

  3. stack-oracle stack-oracle Public

    Generate mechanically deterministic architecture constraints to ground commercial LLM code generation.

  4. debugging-case-studies debugging-case-studies Public

    Published writeups on debugs and troubleshooting

  5. failure-lantern failure-lantern Public

    A lightweight log triage utility that uses deterministic pattern matching and local LLM assistance to surface likely root causes from noisy application logs.

  6. tracehound tracehound Public

    Adversarial API testing framework. Consumes OpenAPI schemas and automatically generates edge-case requests.