Waris Damkham

Offensive Security Engineer · AI Security Researcher · Security Builder

Specialization: Red Teaming, AI Security, Web/AppSec.

Focus areas include enterprise penetration testing, red team operations, Microsoft 365 Conditional Access research, AI security readiness, and security automation.

Black Hat Asia 2026 Arsenal Speaker
DEF CON Singapore 2026 Demo Labs
28 CVEs
3 IEEE Publications
Selected certifications: OffSec Certified Professional+ (OSCP+); OffSec Certified Professional (OSCP); Hack The Box Certified Penetration Testing Specialist; Practical Network Penetration Tester; Certified Red Team Professional; Certified by Altered Security Red Team Professional for Azure; Hack The Box Certified Web Exploitation Specialist; Web Application Penetration Tester eXtreme; Burp Suite Certified Practitioner; Practical AI Pentest Associate; Practical Mobile Pentest Associate; API Security Certified Professional; Hack The Box Certified Defensive Security Analyst; Practical SOC Analyst Associate; Hack The Box Certified Junior Cybersecurity Associate; Jr Penetration Tester (PT1); Cloud Digital Leader Certification; GitHub Foundations
9 Talks & Contributions

8kSec Battle Grounds • iOS Application Exploitation Track

iOS Application Exploitation Challenges (4/11 Labs Completed)

A practical iOS exploitation track covering app instrumentation, Objective-C runtime behavior, Frida workflows, location checks, and mobile application security testing.

Issuer: 8kSecDate: Jun 2026Focus: iOS Exploitation • Frida • Runtime Instrumentation

1) ClearRoute

2) TraceTheMap

3) SwizzleMeTimbers

4) FridaInTheMiddle

5) TrustFall

Certificate pending

6) TraceTheChat

Certificate pending

7) WhereAmIReally

Certificate pending

8) BadPreference

Certificate pending

9) BackSync

Certificate pending

10) FreeFall

Certificate pending

11) SekureBrowzer

Certificate pending

Completed cards link to the certificate viewer. Pending cards use the iOS course banner so the track stays visually aligned with the AI and ARM galleries.