Surya Dev Singh

Conduct full-scope Red Team engagements simulating APT-level adversaries to assess and improve detection & response capabilities of clients. Develop and execute custom attack paths involving initial access, privilege escalation, lateral movement, and domain persistence. Utilize tools like Cobalt Strike, Havoc, Mythic, Donut, Mimikatz, and custom payloads for stealthy operations. Perform assumed breach assessments, adversary emulation, and purple teaming exercises with blue teams. Bypass security controls such as EDR, AV, AMSI, WDAC, and conduct post-exploitation on Windows and Linux environments. Conduct phishing campaigns, payload delivery via client-side attacks, and command & control operations. Report vulnerabilities and weaknesses with detailed kill-chain mapping, MITRE ATT&CK alignment, and actionable remediation steps.

Understand the purpose of the medical machine and assets to be pentested, learning the relevance to the Business, and helping to identify the worst case scenarios to focus on their exploitation Execution of the Penetration test activities, registering all the conducted actions, and following trendy TTPs that real attackers are abusing on the wild that can be used as weapon for medical devices and software's. Documentation of the results of the Penetration test activities, including technical documentation Support, on demand, to the penetration testing lead on organizing, following up and reporting Pentest related activities Creation and maintenance of offensive-related toolset, including applications and underlying infrastructure Automation of offensive-related scans, including detection, exploitation and reporting Support to the IT administrators on explaining the exploitation of findings, as well as proposing recommendations and best practices for remediation Support, on demand, to Red Team activities

Assist in understanding medical devices and their relevance to business needs. Help identify and exploit worst-case scenarios during penetration tests. Document actions and results, follow current attack trends, and create and maintain offensive tools. Automate scans for detection, exploitation, and reporting. Support IT administrators with remediation recommendations and assist in Red Team activities as needed.

As a security researcher at Hadess , I am responsible for identifying, and working on latest TTPs Involve in Red Teaming to Reproduce & reconstruct them . In addition to my core responsibilities, I also focus on researching and analyzing new threat adversaries. I develop and implement new security research techniques related to red teaming and offensive security and create proof-of-concept (POC) exploits and reports for all types of adversaries. I am confident that my skills and experience make me a valuable asset to Hades and the cybersecurity community.

I write technical writeups and penetration testing reports.