Paolo Stagno
Senior Security Researcher & Penetration Tester
"Some things in life are unpredictable, your Security doesn’t have to be one of them"
Paolo Stagno (aka VoidSec) has worked as a consultant for a wide range of clients across top tier international banks, major tech companies and various Fortune 1000 industries. At ZeroDayLab, he was responsible for discovering and exploiting new unknown vulnerabilities in web applications, network infrastructure components, IoT devices, new protocols and technologies. He is now a security researcher and a penetration tester focused on offensive application security. He enjoys understanding the digital world we live in, disassembling, reverse engineering and exploiting complex products and code. In his own research, he discovered various vulnerabilities in software of multiple vendors and tech giant like Cisco, eBay, Facebook, Fastweb, Google, HP, McAfee, Opera, Oracle, Paypal, TIM, Western Union, Yahoo and many others. Since the beginning of his career, he has enjoyed sharing his expertise with the security community with his website and blog. He is also an active speaker in various security conferences around the globe like: Hacktivity, SEC-T, HackInBo, TOHack, Droidcon.
Certified eLearnSecurity eWPT, eWPTX, eJPT; CompTIA PenTest+, CASP+. Attending OSCP certification.
A non-exhaustive list of public vulnerabilities and CVEs that I have discovered can be found here.
"Some things in life are unpredictable, your Security doesn’t have to be one of them"
Paolo Stagno (aka VoidSec) has worked as a consultant for a wide range of clients across top tier international banks, major tech companies and various Fortune 1000 industries. At ZeroDayLab, he was responsible for discovering and exploiting new unknown vulnerabilities in web applications, network infrastructure components, IoT devices, new protocols and technologies. He is now a security researcher and a penetration tester focused on offensive application security. He enjoys understanding the digital world we live in, disassembling, reverse engineering and exploiting complex products and code. In his own research, he discovered various vulnerabilities in software of multiple vendors and tech giant like Cisco, eBay, Facebook, Fastweb, Google, HP, McAfee, Opera, Oracle, Paypal, TIM, Western Union, Yahoo and many others. Since the beginning of his career, he has enjoyed sharing his expertise with the security community with his website and blog. He is also an active speaker in various security conferences around the globe like: Hacktivity, SEC-T, HackInBo, TOHack, Droidcon.
Certified eLearnSecurity eWPT, eWPTX, eJPT; CompTIA PenTest+, CASP+. Attending OSCP certification.
A non-exhaustive list of public vulnerabilities and CVEs that I have discovered can be found here.
