dev101x@kali:~$ whoamiColombian Ethical Hacker, Security Researcher and Software Engineer (aka DevCop95 / Dev101x), based in Cartagena, Colombia 🇨🇴. Currently a Penetration Tester at Henkel (Switzerland · Remote), and pursuing a Master's in Artificial Intelligence at the Universitat de Barcelona.
Focus: offensive security, vulnerability research, and autonomous AI agent architectures — bridging low-level system exploitation with automated intelligence pipelines.
dev101x@kali:~$ cat focus.txt- 🛡️ Vulnerability Research & Threat Emulation: Authored Windows defense-evasion techniques in LOLBAS (PR #525, merged), KeePass & Windows Defender disk-exhaustion adversary emulation tests in Atomic Red Team (PR #3433 & PR #3439, merged), and AnyDesk custom client detection & Sigma rules in LOLRMM (PR #253, merged) — MITRE ATT&CK T1562.001 / T1685, T1555.005 & T1219.
- 🎯 Offensive Security: Bug bounty hunter on HackerOne; builds automated recon/vuln pipelines and OSINT tooling (see pinned projects below).
- 🤖 Applied AI: Security skill layers and LLM integration pipelines (LangChain · Python).
- 🤝 Open to Red Teaming, Applied AI Security, and technical consulting engagements.
⚠️ Authorized use only. Every offensive/security tool linked below is built for use in scoped engagements, CTFs, bug bounty programs and environments the operator owns or is authorized to test. None of it is intended for use against systems without explicit permission.
| Component | Detail |
|---|---|
| Binary & Technique | Fsutil.exe — Defense Evasion via 8dot3 Name Creation Tampering |
| Pull Request | LOLBAS-Project/LOLBAS #525 (Merged) |
| MITRE ATT&CK | T1562.001: Impair Defenses — Disable or Modify Tools |
| Upstream Project | Technique & Emulation Scope | Pull Request | MITRE ATT&CK |
|---|---|---|---|
| 🔴 Red Canary · Atomic Red Team | Multi-platform KeePass discovery, config parsing (KeePass.config.xml) & exfiltration staging (PowerShell, CMD, Linux sh) |
 |
T1555.005: Password Managers |
| 🔴 Red Canary · Atomic Red Team | Windows Defender Antivirus impairment via fsutil.exe file createnew hidden GUID disk exhaustion in %TEMP% (BigDiskBuster telemetry) |
 |
T1685 / T1562.001: Disable or Modify Tools |
| 🗡️ magicsword-io · LOLRMM | AnyDesk custom per-org client coverage: service normalization, trace files (ad_*), EventLog 7045, and Sigma detection rules |
 |
T1219: Remote Access Software |
| Project | Stack | Description |
|---|---|---|
| 🛡️ LOLBAS-Project/LOLBAS | Official Contributor · MITRE T1562.001 |
Native Windows binary technique for defense evasion (PR #525, merged) |
| 🔴 redcanaryco/atomic-red-team | Official Contributor · MITRE T1555.005 · T1685 |
Adversary emulation tests for KeePass credential access & Windows Defender disk exhaustion (PR #3433, PR #3439, merged) |
| 🗡️ magicsword-io/LOLRMM | Official Contributor · MITRE T1219 |
Living Off The Land RMM: AnyDesk custom client detection & Sigma rules (PR #253, merged) |
| 🏹 bugbounty-lab101 | Shell · Recon |
Bug bounty workspace: recon/vuln pipeline, report templates, scope enforcement |
| 🧪 dev101x-pentest-lab | Docker · Python |
Self-contained Pro Lab-style box: blind SQLi → pivot → SUID privesc, with live flag validation |
| 🛡️ BDB-Guardian | PowerShell | Win Defender DoS defensive monitor (cited by CUHK ITSC, LOLBAS #525 & Atomic Red Team #3439) |
| 🔍 shodan_reconsx | Python · Shodan |
OSINT recon framework built on the Shodan API |
| 🤖 cyhber-deploy | Python |
Security skill layer for AI coding agents |
| Period | Role | Company |
|---|---|---|
| 2026 — present | 🛡️ Penetration Tester | Henkel · Switzerland (Remote · Part-time) |
| 2022 — 2025 | 🏢 Chief Technology Officer | EXIA S.A.S — Cartagena, CO |
| 2021 — 2024 | 💻 Semi-Senior Developer | |
| 2020 — present | 🚀 Freelance · Offensive Security & AI | Independent |
| Period | Degree | Institution |
|---|---|---|
| 2024 — present | 🤖 Master's in Artificial Intelligence | Universitat de Barcelona |
| 2017 — 2021 | 🎓 Systems & Computer Engineering | Universidad Tecnológica de Bolívar |
| 2013 — 2017 | 💡 Systems & Computer Technology | Universidad Tecnológica de Bolívar |
"Security is not a product, but a process. Code is poetry. Ship it."
⭐️ From DevCop95 · Colombian Ethical Hacker · Cartagena, Colombia 🇨🇴