Vladimir B.

☠💻🔑🛡Focused on offensive security (Red Team) - Operations (AD, Evasion, C&C, etc) - Cloud - Web | - Proficient in web development and system development using Python, Java, and C, enabling the creation of robust and secure applications.​ - Architected and deployed API security solutions using secure OAuth 2.0 implementations for authentication and authorization of services, ensuring APIs are securely exposed with proper rate limiting and firewalls (WAF) in place.​ - Proficient in conducting cloud-specific penetration tests to identify potential vulnerabilities within cloud application deployments and infrastructures, followed by the remediation and hardening of exposed surfaces.​ -Extensive experience using open-source vulnerability assessment tools to assess the security of web services and applications. Tools like OWASP ZAP, Nikto, Nmap, Wapiti, and SQLmap were employed to identify vulnerabilities such as SQL injections, cross-site scripting (XSS), insecure deserialization, and misconfigurations. Provided detailed reports on vulnerabilities, their risk levels, and remediation strategies, helping development teams prioritize fixes.​ -Experienced in employing tools such as Metasploit, Burp Suite, and custom scripts to exploit vulnerabilities, conduct security assessments, and simulate real-world attack scenarios.​ -Skilled in researching vulnerabilities, analyzing exploit techniques, and understanding the underlying principles of common vulnerabilities, enabling effective identification and mitigation strategies.​ Also: - Pentester - CTF player - TryHackMe -> https://tryhackme.com/r/p/swordfish47