Resume
Click here to view my resume in PDF form!
About Me
I am Daylam Tayari, a junior cybersecurity college student at Arizona State University and incoming penetration testing intern at Bishop Fox who is currently based in Phoenix, Arizona, United States.
In my free time, I love working on various open source projects, enriching my cybersecurity skills, maintaining and improving my homelab and diving deeper in the Linux ecosystem.
I am an avid supporter of open source software and a privacy advocate, helping introduce people to better ways of protecting their personal privacy.
Ever since joining local infosec and Linux communities and being welcomed with open arms, I have thrived in them, introducing numerous people to them and even getting elected to positions of leadership in some of them.
After being an active member of Devilsec, ASU's cybersecurity club which holds weekly presentations with workshops and competes in national collegiate cybersecurity competitions, for numerous years, I was recently elected to Vice-President and have since helped push the club forward encouraging more interactive workshops and building a CTF platform for the club.
I also compete with Devilsec in collegiate cybersecurity competitions such as in the National CCDC.
I also am an active member of ASU's Linux User's Group (ASULUG) where we hold weekly events from installfests to hosting presentations on a myriad of topics, on top of being a welcoming community to ASU students, helping them setting up and configuring their Linux installations.
Whenever I am able to, I also attend talks hosted by PHX2600, Phoenix's 2600 group which hosts a wide variety of interesting talks from demonstrations of some of the first digital computers to talks on cybersecurity and lock picking.
I also remain active in an advisory position for ASU Esports Counter-Strike team having previously played on the varsity team and ranked as one of the best North American players playing competitvely on numerous teams before I decided to fully dedicate all my focus to cybersecurity and my career.
Thanks to my past interest in gaming, I learned about the livestreaming platform Twitch and started building minor tools for the community. When a major copyright restriction crisis hit the platform, developed a tool which aided streamers in the handling of their content including allowing them to recover 'purged' content which has gained over 100,000+ downloads (More details). Building this tool introduced me to Twitch's' GraphQL API and due to them still having public introspection fully enabled, started tracking its changes which included the implementation of new features which were only publicly implemented month later. By monitoring the changes on a regular basis, I was able to discover and announce the introduction of a 'brand safety score' which proved highly controversial leading to the posts alone getting millions of impressions and numerous articles about it in various publications.
I am originally from the suburbs of Paris, France and moved around a lot growing up so am fully bilingual in French (natively) and English, having pursued the majority of my education in English academic systems.
Skills
Programming Languages
Miscellaneous Languages
Technologies
Tools
Miscellaneous
Relevant Experience
Bishop Fox - Incoming Security Consultant 1 (May 2022)
Incoming penetration testing intern at Bishop Fox, starting in May 2022.
Projects
Nmap2Tex (December 2021 - Present)
- Developed a tool which automatically takes in outputs from Nmap scans and converts them into nicely formatted network diagrams in LaTeX.
- Supports including users in the network inventory.
- Allows for the input of Nmap vulnerability scans resulting in tables displaying all the CVEs present on hosts and correspondingly rating and colour coding how vulnerable a host is.
Curated ICO (August 2021 - Present)
- After identifying a need in the cryptocurrency space, developing a data aggregation and analysis platform in a coordinated team environment to assist investors in discovering new but trustworthy cryptocurrencies by detecting specific patterns and scoring them accordingly.
- Designed and deployed a PostgreSQL database paired with a correlating GraphQL API in order to store large collections of financial data and allow for their retrieval in less than 0.1ms.
- Developed an automated data retrieval tool with a runtime of 9.5ms that fetches financial data on cryptocurrencies via APIs and inputs them into a database using a GraphQL API to perform historical analysis.
To-Do Export (February 2021)
- Frustrated by a total lack of any export solutions for the Microsoft To-Do program, devised and developed a custom solution that exports all task lists into a format compatible to be imported directly into other task management applications.
- Developed in Java and utilizes REST APIs to retrieve the task lists which are then converted into the appropriate CSV and JSON formats in order to ensure compatibility with other task management applications.
Twitch Recover (December 2020 - Present)
- Following a copyright restriction crisis on a popular live streaming platform, developed a tool that has over 100,000+ downloads that allows users to better manage and recover their video content.
- Built in Java and utilizes REST and GraphQL APIs to retrieve and feed video content to end users.
- Resolved hundreds of user tickets, performing the relevant support and issue remediation.
Discord Bots
For various reasons, I have created numerous Discord bots, built in JavaScript using NodeJS and the Discord.js
NPM package.
- Topic Bot: Discord bot which following a particular message being sent in chat, posts a topic or conversation prompt, taken from a given list of prompts. Also allows users to both control the bot and add new prompts directly through Discord, allowing them to not have to go manually edit the files every time.
- Discord Embedder: Discord bot which takes in a given input and creates and posts the content in an embed format.
Homelab (September 2020 - Present)
- Deployed a full infrastrucutre in Proxmox with numerous virtual machines and Docker containers containing a large variety of self-hosted services, all hidden behind a reverse-proxy which correctly points requests to the respective instances.
- Configured and deployed my own mail server which is fully self-hosted and self-managed including hardening both the mail server itself and my mail protocols such as by adding MTA-STS records.
- Deployed a large variety of enterprise software from VSphere and VCenter to Gitlab and TrueNAS.
- Continuously advancing my skills by maintaining the whole infrastructure, from simple monitoring and updating to vulnerability mitigation and patching configuration issues.
- Advance my skills in cybersecurity by having setup numerous vulnerable environments to practice upon.
Dotfiles (September 2021 - Present)
- My system configurations which include expansive configuration files for a large variety of tools and programs that I regularly use.
- Includes bash scripts which allow for the automated configuration and installing of dependencies, automatically adjusting to the system and it's package manager.
- A constant work in progress.
Pi-Hole Blocklist (June 2020 - Present)
Created an extensive blocklist for the DNS sinkhole Pi-Hole, compiled from numerous other blocklists and then further customised by myself which is actively used by numerous people and has been the source of inspiration for many others..
Contact Me
If you want to reach out to me about a professional matter, feel free to email me at [email protected]
While not mandatory, I highly advise anyone emailing me to use PGP key encryption.
The public key for the above email can be found at https://pgp.tayari.gg and when sending your email, please attach your public key to allow me to also respond in an encrypted fashion.
This email is exclusively for professional matters, if it is not a professional matter please use the contact information provided in about page.