About

Offensive Security

I lead and carry out hands-on red-team and penetration-testing work in large global enterprise environments spanning IT, cloud, and OT. This includes web applications, networks and infrastructure, Azure and other cloud services, Windows and Linux systems, and identity and Active Directory attack paths.

My work is objective-driven. I tend to follow attack paths beyond individual findings, combining application, identity, infrastructure and operating-system weaknesses where necessary. When conventional techniques do not provide a path forward, I move into source-code analysis, reverse engineering and vulnerability research.

Vulnerability Research

My deeper research covers Windows internals and privilege boundaries, source-code review, and static and dynamic analysis of native and managed binaries. I often examine services, IPC interfaces, installers, and update mechanisms in enterprise and industrial software.

Public findings include six CVEs affecting Cisco, BeyondTrust, Hitachi Energy, and AVEVA. The industrial findings are also documented in CISA ICS advisories.

Tooling and Collaboration

I build offensive tooling and proof-of-concept exploits, pair with peers on difficult attack paths, mentor engineers, and work with defenders after assessments.