Bio

Security Researcher interested in reversing, malware analysis, CTFs, PrivEsc vulns, and DevOps security (docker and k8s). Worked in a range of professions in the security industry (malware analysis, security researcher, mobile hacking, etc.). During this time, I developed open-source projects (security tools). The projects include: Ketshash, Manifesto, DropNet, KubiScan, kubeletctl, kubesploit and RPCMon. My current research is on DevOps security, focusing on Docker and Kubernetes. I have spoke at the following conferences: BlackHat USA 2019 - ''Compromising Kubernetes Cluster by Exploiting RBAC Permissions'' BlackHat Europe 2019 and USA 2020 and - ''KubiScan: Searching for Risky Pods and Permissions in Kubernetes Cluster'' BlackHat Europe 2020: ''kubeletctl: A Kubelet Client to Attack Kubernetes'' RSA USA 2020 - ''Compromising Kubernetes Cluster by Exploiting RBAC Permissions'' BlackHat USA, Europe 2021 and Asia 2022: ''Kubesploit: A Post-Exploitation Framework, Focused on Containerized Environments'' RSA USA 2022 - ''Attacking and Defending Kubernetes Cluster: Kubesploit vs KubiScan'' Coding Languages: C, C++ , C#, Assembly, Java and Go. Scripting: Javascript, Batch,VB, PowerShell and Python. Systems: Windows, Linux, Android, Docker and Kubernetes