Phantom
PrivateAutonomous penetration testing platform
A supervised, human-in-the-loop autonomous pentest platform. Currently private.
Private · HiTL · Self-hosted
Red teamer · builder · PNPT
David Estfanous
I break into systems for a living, and build the platforms that make that work sharper.
01 · Built
Named work
Platforms I've built.
BetterNotes
Publishable study notes, built end-to-end
Full-stack notes platform with a real editor, public sites, custom domains, and subscriptions.
Next.js · Supabase · Vercel
Home Lab
Active Directory practice environment
VMware Workstation lab used since 2018 for AD attacks, vuln-box practice, malware dev, EDR tuning, and report-quality documentation.
VMware · Active Directory · Kali · Elastic EDR
02 · Background
About & experience
Penetration Tester at PwC. I run engagements end-to-end and create internal tooling when the manual process starts burning hours. Penn State Cybersecurity Analytics & Operations.
Certifications
EarnedPNPTPractical Network Penetration TesterEarnedPJPTPractical Junior Penetration Tester
In progressCCAR-FClaude Certified Architect
Experience
PwC
Consultant
September 2025 to Present
- Full red team, assumed breach, external pentesting, social engineering, LLM testing, SAST, and deepfake engagements.
- Built internal tooling to automate Active Directory penetration testing techniques, saving testers hours per engagement.
- Used Codex to build a tool that normalizes tooling results and surfaces affected files for faster code review.
NRI North America
Consultant
October 2024 to September 2025
- Red team, internal/external pentesting, phishing campaigns, vulnerability assessments, black box and grey box testing.
- Planned a physical pentest approach from client recon and gained authorized building access through reception pretexting.
- Automated testing with Python scripts that reduced project hours by 40+.
- Built custom loaders that evaded fully hardened endpoint defenses during engagements.
Penn State University · Bachelor's, Cybersecurity Analytics & Operations · Dean's List most semesters
03 · Notes
Study notes
Public write-ups on AD CS, external testing, and cert prep.
04 · Contact
Get in touch
Projects, roles, or collaboration. Use the form below.