Penetration tester with 8 years of experience. My research is mostly focused on web applications and thick clients.
CVEs
- CVE-2023-24482: COMOS - RCE via Buffer Overflow
- CVE-2025-13631: Google Chrome Enterprise (MacOS) - LPE via Arbitrary File Write
- CVE-2025-36506: RICOH Streamline NX - Arbitrary File Overwrite
- CVE-2025-46783: RICOH Streamline NX - Code Execution Arbitrary File Delete (Path Traversal)
- CVE-2025-48825: RICOH Streamline NX - Code Execution via Update
- CVE-2026-21409: RICOH Streamline NX - Leakage of Credential IDs and Users PII
- CVE-2026-4000: HP Hotkey UWP Service - Escalation of Privilege
Exploits
Talks
Certifications & Trainings
- Mar 2026 | RET2 - Fundamentals of Software Exploitation
- Fev 2025 | OSMR - Offensive Security macOS Researcher
- June 2024 | CRTO - Certified Red Team Operator
- June 2023 | CISSP - Certified Information System Security Professional
- Aug 2022 | Corelan “Advanced” - Heap Exploitation
- Feb 2022 | OSCE3 - Offensive Security Certified Expert
- Feb 2022 | OSED - Offensive Security Exploit Developer
- Aug 2021 | Assessing and Exploiting Control Systems and IIoT - Sevenshift
- July 2021 | CPENT - Certified Penetration Testing Professional
- April 2021 | OSEP - Offensive Security Experienced Penetration Tester
- March 2021 | CISA - Certified Information Security Auditor
- Oct 2020 | OSWP - Offensive Security Wireless Professional
- July 2020 | CEH (Practical) - Certified Ethical Hacker (Practical)
- April 2020 | OSCE - Offensive Security Certified Expert
- Dec 2019 | OSWE - Offensive Security Web Expert
- March 2019 | OSCP - Offensive Security Certified Professional