Blue Team / DetectionJuly 08, 2026
Hack The Box Certified Defensive Security Analyst
Hack The Box
View Credential
Waris Damkham
Offensive Security Engineer · AI Security Researcher · Security Builder
Red Teaming • AI Security • Identity & AppSec
About Me
I am an Offensive Security Engineer, AI Security Researcher, and Security Builder with 2+ years of hands-on experience across enterprise penetration testing, red team operations, applied security research, and AI-assisted security automation.
My professional work includes end-to-end security assessments across web applications, APIs, mobile applications, and infrastructure, alongside red team operations focused on real-world attack scenarios, identity abuse, and security posture improvement. I also build security automation and AI-assisted offensive tooling for vulnerability analysis, alert triage, and black-box penetration testing.
As an independent researcher-builder, I investigate security issues, develop proof-of-concept tools, create reproducible labs, and publish technical research. My work includes identity and access security research involving Microsoft 365 Conditional Access, as well as Oblivion Token, an offensive research tool presented at Black Hat Asia 2026 Arsenal and DEF CON Singapore 2026 Demo Labs.
Selected outputs include 28 CVEs and 3 IEEE publications across Android OAuth 2.0 security testing and applied AI/ML systems. I am open to global opportunities in Offensive Security Research, Vulnerability Research, AI Security, Red Team Engineering, Application Security, and graduate research pathways.
Featured Credentials
Experience
Offensive Security Engineer
Key Responsibilities & Achievements
- Delivered 40+ penetration tests across annual assessments and major-change projects, and contributed as a core member of advanced Red Team engagements, translating findings into practical remediation actions.
- Supported SSE security testing, including AI Prompt Gateway testing, guardrail validation, and Thai/English attack scenarios.
- Owned 10+ major security assessment projects across 2025–2026, leading planning, testing oversight, reporting, stakeholder communication, and remediation follow-up.
Cybersecurity Consultant (Penetration tester)
Key Responsibilities & Achievements
- Conducted in-depth penetration testing of IT infrastructure, identifying vulnerabilities in operating systems, applications, configurations, and user behavior.
- Specialized in web, mobile, and software vulnerability assessments following OWASP Top 10 and industry best practices.
- Delivered detailed security reports with actionable remediation steps to strengthen clients’ overall security posture.
- Worked cross-functionally with development and infrastructure teams to ensure timely remediation of security risks.
- Successfully completed 16 security assessment projects during the engagement.
Cybersecurity Consultant (Penetration tester)
Key Responsibilities & Achievements
- Assisted in conducting penetration tests on software, mobile, and web applications using tools such as Kali Linux and Burp Suite.
- Followed OWASP best practices to identify and document security vulnerabilities and simulate real-world cyberattacks.
- Performed vulnerability assessments on KPMG’s internal network using Nessus and other scanning tools.
- Contributed to the development of a secure internal website, incorporating security-by-design principles.
- Completed 2 penetration testing projects and 1 vulnerability assessment project, improving communication of complex findings to stakeholders.
Talks & Contributions
ContributionPublished
UploadSmith listed on the Caido Plugin Store
Caido Plugin Store
Built and released UploadSmith, a focused Caido plugin for file upload testing workflows. The plugin helps testers quickly mutate Content-Type values, filename extensions, and magic byte payloads directly inside Caido’s request editor.
Demo LabsPresented
Oblivion Token: M365 Conditional Access Policy Bypass OST (Offensive Tooling)
DEF CON Singapore 2026 Demo Labs
Presented for DEF CON Singapore 2026 Demo Labs. Oblivion Token is an offensive research utility for practical, repeatable testing of Microsoft 365 Conditional Access (CA) edge cases. It systematizes token-centric workflows to help identify where device, network, or app-context assumptions can fail in real-world environments.
ArsenalPresented
Oblivion Token: M365 Conditional Access Policy Bypass OST (Offensive Tooling)
Black Hat Asia Arsenal 2026
Presented at Black Hat Asia 2026 Arsenal. Oblivion Token is an offensive research utility for practical, repeatable testing of Microsoft 365 Conditional Access (CA) edge cases. It systematizes token-centric workflows to help identify where device, network, or app-context assumptions can fail in real-world environments.
Research & Publications
Offensive Research Tool2026
Oblivion Token: M365 Conditional Access Policy Bypass OST (Offensive Tooling)
Black Hat Asia 2026 Arsenal and DEF CON Singapore 2026 Demo Labs
Oblivion Token is a focused offensive-research utility that makes Microsoft 365 Conditional Access Policy (CAP) bypass testing practical, repeatable, and scriptable. Designed for red-teamers and security researchers, it systematizes token-centric workflows and exercises policy edge cases to expose where device, network, or app-context assumptions fail including realistic test paths against Microsoft first-party (built-in) applications.
TENCON 20242024
Practical Mobile Based Services for Identification of Chicken Diseases From Fecal Images
IEEE Region 10 Conference 2024
Poultry farming is crucial to the food chain, and chicken health directly impacts product quality and safety. Diagnosing poultry diseases using polymerase chain reaction is costly, particularly for small farms. To address this, we developed a mobile-based service for farmers, enabling the identification of common chicken diseases from fecal images via a Line account. Our system achieved 86.49% segmentation precision and 95.93% classification accuracy on a large dataset, offering a practical and accessible tool for local farmers.
QRS 20232023
Detecting Vulnerable OAuth 2.0 Implementations in Android Applications
23rd IEEE International Conference on Software Quality, Reliability, and Security
OAuth 2.0, commonly used for authorization, can be susceptible to CSRF attacks in Android applications. To address this, we developed an Android app to assess other apps' use of the OAuth 2.0 state parameter—a key defense against CSRF. Our analysis, conducted on both Chrome and the default browser, evaluates whether Android apps using OAuth 2.0 are adequately protected against CSRF attacks. Our research aims to protect users by highlighting apps with potentially vulnerable OAuth 2.0 implementations.
Security Vulnerabilities (CVEs)
Critical
CVE-2026-1830
Quick Playground
The Quick Playground plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.3.1. This is due to insufficient authorization checks on REST API endpoints that expose a sync code and allow arbitrary file uploads. This makes it possible for unauthenticated attackers to retrieve the sync code, upload PHP files with path traversal, and achieve remote code execution on the server.
Medium
CVE-2026-4766
Easy Image Gallery
The Easy Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Gallery SHORTCODE post meta field in all versions up to, and including, 1.5.3. This is due to insufficient input sanitization and output escaping on user-supplied gallery SHORTCODE values. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Medium
CVE-2026-2720
Hr Press Lite
The Hr Press Lite plugin for WordPress is vulnerable to unauthorized access of sensitive employee data due to a missing capability check on the `hrp-fetch-employees` AJAX action in all versions up to, and including, 1.0.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to retrieve sensitive employee information including names, email addresses, phone numbers, salary/pay rates, employment dates, and employment status.
Projects
Credentials & Recognition
AI SecurityJun 30, 2026
Certified Artificial Intelligence Security & Risk (CAISR)
Red Team Leaders
View Credential
Mobile / WirelessJun 2026
iOS Application Exploitation Challenges (4/11 Labs Completed)
8kSec
View Credential
Capabilities & Tools
Offensive Security & Red Teaming
Hands-on assessment, adversary simulation, exploitation, and vulnerability validation.
Penetration TestingRed TeamingWeb ExploitationNetwork ExploitationPrivilege EscalationBurp SuiteKali LinuxNmapMetasploitsqlmapHydraHashcatJohn the RipperWiresharkNessus
Application, API & Mobile Security
Security review and testing across web, API, mobile, OAuth, and Android attack surfaces.
Application SecurityAPI SecurityMobile SecurityAndroid SecurityOAuth 2.0OIDCOWASP Top 10MobSFADBPostman
Identity, Cloud & M365 Security
Identity-centered cloud security research, policy testing, and Microsoft 365 attack paths.
Microsoft Entra IDMicrosoft 365Conditional AccessMicrosoft Graph APIAzureAWSCloud Security
AI, LLM & Machine Learning
AI security readiness, LLM threat modeling, and applied machine-learning research experience.
AI SecurityLLM SecurityAI Red TeamingPrompt InjectionMCP SecurityOWASP LLM Top 10TensorFlowKerasPyTorchOpenCVPandasNumPyYOLOResNet50
Security Automation & Engineering
Automation and engineering used to scale testing, reporting, triage, and repeatable workflows.
PythonJavaScriptBashPower AutomatePower AppsGitHub ActionsSeleniumpytestRobot FrameworkGit
Software, Web & Backend Engineering
General software engineering, frontend/backend development, and project delivery experience.
JavaCDartReactNode.jsNext.jsFlaskSpring BootHTMLCSSTailwind CSSBootstrapFirebaseElasticsearchMongoDBMySQL
Cloud, DevOps & Infrastructure
Cloud platforms, deployment, CI/CD, containers, and infrastructure operations.
AWSAzureHuawei CloudDockerOpenShiftNginxGitHub PagesJenkinsGradleMavenAntPM2
Reporting, Research & Communication
Turning technical findings into clear executive, engineering, academic, and public-facing output.
Executive ReportingTechnical ReportingVulnerability TriageCVE ResearchRisk CommunicationSecurity BriefingPublic SpeakingConference DemosChallenge AuthoringKnowledge SharingMarkdownLaTeX
Productivity & Collaboration
Workplace tools used for documentation, presentation, workflow automation, and team collaboration.
Microsoft WordMicrosoft PowerPointMicrosoft ExcelPower AutomatePower AppsCopilot StudioLINE Official Account
Education
Mahidol University
Bachelor of Science (Information and Communication Technology)International Program2020 - 2024Thailand 🇹🇭
Thesis
Senior project / thesis focused on classifying chicken diseases from fecal images through a LINE Official Account.
Joined the exhibition showcasing B.Sc. ICT International Program student internships. Proudly shared my experience from Ritsumeikan University among esteemed peers. An enriching platform for insights and networking.
Bangkok Christian College
GPAX 3.48Smart Computer2008 - 2020Thailand 🇹🇭
University application portfolio and supporting academic showcase.
Competitions
Blog
My Resume
Download or preview my latest resume.
waris_m@portfolio:~$ cat contact.txt
# CONTACT INFORMATION
Email:waris.dam@outlook.com
LOCATION:Bangkok, Thailand 🇹🇭
# SOCIAL NETWORKS
LinkedIn:linkedin.com/in/waris-damkham
GitHub:github.com/Waariss
Medium:medium.com/@waaris_m
ResearchGate:researchgate.net/profile/Waris-Damkham
LetsDefend:app.letsdefend.io/user/Waarism
waris_m@portfolio:~$