Advanced Penetration Testing of Non-Western IT Infrastructures

Bio

Steve Borosh is a proud U.S. Army Infantry veteran and security consultant at Black Hills Information Security. Since 2014 he has worked as a penetration tester, red team operator, and instructor for public, private, and federal law enforcement audiences.

His current focus is building practical, high-energy courses that teach operators how to develop realistic attack paths and custom tooling against non-Western IT environments. These courses cover systems such as AstraOS and ALDPro, as well as simulated Russian and Chinese network architectures—environments that most Western-centric training simply ignores. The goal is to give students the flexible TTPs and mindset needed to assess the security of any non-Western infrastructure they may encounter.

Steve regularly delivers this material at BSides Prague, BSides Krakow, and for private customers, in addition to speaking at Black Hat, Gartner, and other conferences. He maintains a blog and GitHub repository where he shares open-source offensive tools and research with the community.

He holds a B.S. in Computer and Information Science from ECPI University.