Eduardo M.

With 4 years of experience in Offensive Security, my journey includes roles in Pentesting and Red Teaming, where I have led projects across various sectors, from industrial to banking, healthcare, and governmental organizations. This diversity has provided me with a broad and detailed understanding of different testing environments, enhancing my exploitation capabilities. Over time, I have conducted tests in Infrastructure, Active Directory, and Mobile environments, but it was in Web and API Application Pentesting that I developed a distinct expertise. This natural interest led me to Security Research and Code Review, areas where I have identified several Zero-Day vulnerabilities in widely used software. Among the vulnerabilities found, critical issues such as Broken Access Control, SQL Injection, and Command Injection in access management systems and smart systems have stood out, resulting in 29 CVEs to my name. In addition to research, I have been active on Bug Bounty platforms, where I have discovered critical vulnerabilities like RCE, SQLi, IDOR, and Broken Access Control in large global corporations. I am constantly evolving, always seeking technical improvement and certification in key security areas. I currently hold the CRTO certification from ZeroPointSecurity and OSCP from Offsec. ---====📓Certifications====--- 🎖️OSCP (Offensive Security Certified Professional) 🎖️OSWE (OffSec Web Expert) 🎖️CRTO (Certified Red Team Operator) ---==== 🔍Security Research ====--- ⭐Oracle Security-In-Depth Contributors ⭐Oracle Security-In-Depth Contributors ⭐CVE-2023-2043 - SQL Injection ⭐CVE-2023-2044 - Stored Cross-Site Scripting ⭐CVE-2023-2421 - Stored Cross-Site Scripting ⭐CVE-2023-2524 - Direct Request/BAC ⭐CVE-2023-2739 - Reflected Cross-Site Scripting ⭐CVE-2023-4983 - Reflected Cross-Site Scripting ⭐CVE-2024-22831 - Reflected Cross-Site Scripting ⭐CVE-2024-6005 - Stored Cross-Site Scripting ⭐CVE-2024-6006 - Stored Cross-Site Scripting ⭐CVE-2024-6080 - Unquoted Service Path - Privilege Escalation ⭐CVE-2024-6344 - Stored Cross-Site Scripting ⭐CVE-2024-7901 - Stored Cross-Site Scripting ⭐CVE-2024-8370 - Stored Cross-Site Scripting