Six years of breaking into things that matter — and writing the report that closes the door behind me. Hall of Fame at NASA, SpaceX, Binance and three more.
Years in offensive security
Global Hall of Fame entries
TryHackMe of 3M+ users
Rooms & labs completed
Recognized by
Cybersecurity engineer and ethical hacker with 6+ years of experience in red team operations, penetration testing, and exploit development. NASA Hall of Fame recipient and top 1% TryHackMe performer, specializing in advanced persistent threat simulation, malware research, and vulnerability discovery. Proven track record of identifying critical vulnerabilities in major organizations including NASA, SpaceX, Binance, Starlink, Telstra, and Lenovo.
➜~whoami
reju.kole — offensive security engineer
➜~cat ./focus.txt
red team ops · exploit dev · malware research
➜~uptime
6+ years, still hunting
➜~
Critical vulnerabilities found and responsibly disclosed to some of the most security-sensitive organizations on the planet.
Official Letter of Recognition
Discovered critical vulnerabilities in NASA's infrastructure, enhancing space mission security
Security Vulnerability Disclosure
Identified critical security vulnerabilities in SpaceX systems, contributing to the security of space exploration missions
Cryptocurrency Exchange Security
Discovered critical vulnerabilities in the world's largest cryptocurrency exchange, protecting millions of users' assets
Satellite Internet Security
Enhanced the security of global satellite internet infrastructure through responsible vulnerability disclosure
Telecommunications Security
Improved the security posture of Australia's leading telecommunications infrastructure through vulnerability research
Enterprise Computing Security
Contributed to the security of enterprise computing solutions used by millions of businesses worldwide
Assigned identifiers for vulnerabilities I found, reported, and saw through to a fix. Both cards are encrypted — move your cursor across one to decrypt it.
CVE-2026-65693
The mail template engine runs in an unsandboxed Twig environment with no security policy. An authenticated administrator can inject Twig expressions that break out of the template context and execute arbitrary commands on the host.
Arbitrary OS command execution
Improper Control of Generation of Code
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
View advisoryCVE-2026-63725
FileBackupService passes the backup directory path into a shell command without sanitization. An authenticated administrator can inject commands that run as the web server user — exposing the password manager's master password, encryption keys, and every stored credential.
Full credential vault compromise
Improper Neutralization of OS Command Elements
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
View advisoryIndependent research and client engagements, running in parallel since 2018.
Every system has a way in.
My job is to find it first.
Six years of red team operations across aerospace, fintech, telecom and satellite infrastructure.
Offensive tooling and research, from kernel-adjacent evasion work to the automation that makes an engagement repeatable.
Stack
// engagement result
defender_bypass: true
success_rate: 0.95
conference_case_study: true
Certifications, Pro Labs, and competition results — the receipts behind the résumé. Sweep the scanner across the badges.
Move your cursor across the list — the hex lattice charges where you touch it, and clicking detonates a shockwave.
Click to detonate
What I'm training for, and where the research is heading.
Engagements are scoped to your stack, run against real defenses, and land as findings your engineers can act on. Drag your cursor at a card's right edge to peel it back.
Red team operations, exploit development, and vulnerability research — for teams that would rather hear it from me than read it in a breach report.