2nd Runner-up
Thailand Banking AI Red Team Challenge 2026
Thailand Banking Sector CERT (TB-CERT)
Waris Damkham
Offensive Security Engineer · AI Security Researcher · Security Builder
Red Teaming • AI Security • Identity & AppSec
About Me
I am an Offensive Security Engineer, AI Security Researcher, and Security Builder with 2+ years of hands-on experience across enterprise penetration testing, red team operations, applied security research, and AI-assisted security automation.
My professional work includes end-to-end security assessments across web applications, APIs, mobile applications, and infrastructure, alongside red team operations focused on real-world attack scenarios, identity abuse, and security posture improvement. I also build security automation and AI-assisted offensive tooling for vulnerability analysis, alert triage, and black-box penetration testing.
As an independent researcher-builder, I investigate security issues, develop proof-of-concept tools, create reproducible labs, and publish technical research. My work includes identity and access security research involving Microsoft 365 Conditional Access, as well as Oblivion Token, an offensive research tool presented at Black Hat Asia 2026 Arsenal and DEF CON Singapore 2026 Demo Labs.
Selected outputs include 28 CVEs and 3 IEEE publications across Android OAuth 2.0 security testing and applied AI/ML systems. I am open to global opportunities in Offensive Security Research, Vulnerability Research, AI Security, Red Team Engineering, Application Security, and graduate research pathways.
Featured Credentials
Experience
Offensive Security Engineer
Key Responsibilities & Achievements
- Delivered 40+ penetration tests across annual assessments and major-change projects, and contributed as a core member of advanced Red Team engagements, translating findings into practical remediation actions.
- Supported SSE security testing, including AI Prompt Gateway testing, guardrail validation, and Thai/English attack scenarios.
- Owned 10+ major security assessment projects across 2025–2026, leading planning, testing oversight, reporting, stakeholder communication, and remediation follow-up.
Cybersecurity Consultant (Penetration tester)
Key Responsibilities & Achievements
- Conducted in-depth penetration testing of IT infrastructure, identifying vulnerabilities in operating systems, applications, configurations, and user behavior.
- Specialized in web, mobile, and software vulnerability assessments following OWASP Top 10 and industry best practices.
- Delivered detailed security reports with actionable remediation steps to strengthen clients’ overall security posture.
- Worked cross-functionally with development and infrastructure teams to ensure timely remediation of security risks.
- Successfully completed 16 security assessment projects during the engagement.
Cybersecurity Consultant (Penetration tester)
Key Responsibilities & Achievements
- Assisted in conducting penetration tests on software, mobile, and web applications using tools such as Kali Linux and Burp Suite.
- Followed OWASP best practices to identify and document security vulnerabilities and simulate real-world cyberattacks.
- Performed vulnerability assessments on KPMG’s internal network using Nessus and other scanning tools.
- Contributed to the development of a secure internal website, incorporating security-by-design principles.
- Completed 2 penetration testing projects and 1 vulnerability assessment project, improving communication of complex findings to stakeholders.
Talks & Contributions
ConferenceUpcoming (Accepted)
Your Clients Think MFA Means Secure. Prove Them Wrong: Systematic M365 Conditional Access Bypass via Microsoft First-Party Apps
Red x Blue Pill 2026
Waris Damkham and Nuttakorn Tungpoonsup present a systematic methodology for mapping Microsoft 365 Conditional Access enforcement across users, resources, client applications, authentication flows, and Microsoft first-party app behavior.
Demo LabsPresented
Oblivion Token: M365 Conditional Access Policy Bypass OST (Offensive Tooling)
DEF CON Singapore 2026 Demo Labs
Presented for DEF CON Singapore 2026 Demo Labs. Oblivion Token is an offensive research utility for practical, repeatable testing of Microsoft 365 Conditional Access (CA) edge cases. It systematizes token-centric workflows to help identify where device, network, or app-context assumptions can fail in real-world environments.
ArsenalPresented
Oblivion Token: M365 Conditional Access Policy Bypass OST (Offensive Tooling)
Black Hat Asia Arsenal 2026
Presented at Black Hat Asia 2026 Arsenal. Oblivion Token is an offensive research utility for practical, repeatable testing of Microsoft 365 Conditional Access (CA) edge cases. It systematizes token-centric workflows to help identify where device, network, or app-context assumptions can fail in real-world environments.
Publications
TENCON 2024
2024Practical Mobile Based Services for Identification of Chicken Diseases From Fecal Images
IEEE Region 10 Conference 2024
QRS 2023
2023Detecting Vulnerable OAuth 2.0 Implementations in Android Applications
23rd IEEE International Conference on Software Quality, Reliability, and Security
InCIT 2022
2022Automated COVID-19 Screening Framework Using Deep CNN With Chest X-Ray Medical Images
6th International Conference on Information Technology
Awards
LinkedIn Post
Rising Award
KBTG Star Awards 2025
KASIKORN Business-Technology Group (KBTG)
Security Vulnerabilities (CVEs)
Critical
CVE-2026-1830
Quick Playground
The Quick Playground plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.3.1. This is due to insufficient authorization checks on REST API endpoints that expose a sync code and allow arbitrary file uploads. This makes it possible for unauthenticated attackers to retrieve the sync code, upload PHP files with path traversal, and achieve remote code execution on the server.
Medium
CVE-2026-4766
Easy Image Gallery
The Easy Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Gallery SHORTCODE post meta field in all versions up to, and including, 1.5.3. This is due to insufficient input sanitization and output escaping on user-supplied gallery SHORTCODE values. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Medium
CVE-2026-2720
Hr Press Lite
The Hr Press Lite plugin for WordPress is vulnerable to unauthorized access of sensitive employee data due to a missing capability check on the `hrp-fetch-employees` AJAX action in all versions up to, and including, 1.0.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to retrieve sensitive employee information including names, email addresses, phone numbers, salary/pay rates, employment dates, and employment status.
Projects
Credentials & Recognition
Blue Team / DetectionJuly 08, 2026
Hack The Box Certified Defensive Security Analyst
Hack The Box
View Credential
AI SecurityJun 30, 2026
Certified Artificial Intelligence Security & Risk (CAISR)
Red Team Leaders
View Credential
Mobile / WirelessJun 2026
iOS Application Exploitation Challenges (4/11 Labs Completed)
8kSec
View Credential
Capabilities & Tools
Offensive Security & Red Teaming
Hands-on assessment, adversary simulation, exploitation, and vulnerability validation.
Penetration Testing · Red Teaming · Web Exploitation · Network Exploitation · Privilege Escalation · Burp Suite · Kali Linux
Application, API & Mobile Security
Security review and testing across web, API, mobile, OAuth, and Android attack surfaces.
Application Security · API Security · Mobile Security · Android Security · OAuth 2.0 · OIDC · OWASP Top 10
Identity, Cloud & M365 Security
Identity-centered cloud security research, policy testing, and Microsoft 365 attack paths.
Microsoft Entra ID · Microsoft 365 · Conditional Access · Microsoft Graph API · Azure · AWS · Cloud Security
AI, LLM & Machine Learning
AI security readiness, LLM threat modeling, and applied machine-learning research experience.
AI Security · LLM Security · AI Red Teaming · Prompt Injection · MCP Security · OWASP LLM Top 10 · TensorFlow
Security Automation & Engineering
Automation and engineering used to scale testing, reporting, triage, and repeatable workflows.
Python · JavaScript · Bash · Power Automate · Power Apps · GitHub Actions · Selenium
Reporting, Research & Communication
Turning technical findings into clear executive, engineering, academic, and public-facing output.
Executive Reporting · Technical Reporting · Vulnerability Triage · CVE Research · Risk Communication · Security Briefing · Public Speaking
Education
Mahidol University
Bachelor of Science (Information and Communication Technology)International Program2020 - 2024Thailand 🇹🇭
Thesis
Senior project / thesis focused on classifying chicken diseases from fecal images through a LINE Official Account.
Joined the exhibition showcasing B.Sc. ICT International Program student internships. Proudly shared my experience from Ritsumeikan University among esteemed peers. An enriching platform for insights and networking.
Bangkok Christian College
GPAX 3.48Smart Computer2008 - 2020Thailand 🇹🇭
University application portfolio and supporting academic showcase.
Competitions
Blog
My Resume
waris_m@portfolio:~$ ls -lh latest-resume.pdf
Waris_Resume_2026.pdf
Preview the document here or download the original PDF.
waris_m@portfolio:~$ whoami
Waris Damkham
Offensive Security Engineer · AI Security Researcher
# CONTACT
Email:waris.dam@outlook.com
Location:Bangkok, Thailand 🇹🇭
# PROFILES
waris_m@portfolio:~$