---

dev101x@kali:~$ whoami

Colombian Ethical Hacker, Security Researcher and Software Engineer (aka DevCop95 / Dev101x), based in Cartagena, Colombia 🇨🇴. Currently a Penetration Tester at Henkel (Switzerland · Remote), and pursuing a Master's in Artificial Intelligence at the Universitat de Barcelona.

Focus: offensive security, vulnerability research, and autonomous AI agent architectures — bridging low-level system exploitation with automated intelligence pipelines.

dev101x@kali:~$ cat focus.txt

• 🛡️ Vulnerability Research & Threat Emulation: Windows defense-evasion techniques, adversary emulation tests and detection rules merged upstream in LOLBAS, Atomic Red Team and LOLRMM (details below).
• 🎯 Offensive Security: Bug bounty hunter on HackerOne private programs; builds automated recon/vuln pipelines and OSINT tooling (see pinned projects below).
• 🤖 Applied AI: Security skill layers and LLM integration pipelines (LangChain · Python).
• 🤝 Open to Red Teaming, Applied AI Security, and technical consulting engagements — 📫 yared.henriquezb@gmail.com.

⚠️ Authorized use only. Every offensive/security tool linked below is built for use in scoped engagements, CTFs, bug bounty programs and environments the operator owns or is authorized to test. None of it is intended for use against systems without explicit permission.

---

🛡️ Vulnerability Research & Official Contributions

Upstream Project	Technique & Emulation Scope	Pull Request	MITRE ATT&CK
🛡️ LOLBAS Project · LOLBAS	Fsutil.exe (file createnew) — Windows Defender Antivirus impairment via disk exhaustion		T1685 (formerly T1562.001): Disable or Modify Tools
🔴 Red Canary · Atomic Red Team	Multi-platform KeePass discovery, config parsing (KeePass.config.xml) & exfiltration staging (PowerShell, CMD, Linux sh)		T1555.005: Password Managers
🔴 Red Canary · Atomic Red Team	Windows Defender Antivirus impairment via fsutil.exe file createnew hidden GUID disk exhaustion in %TEMP% (BigDiskBuster telemetry)		T1685 (formerly T1562.001): Disable or Modify Tools
🗡️ magicsword-io · LOLRMM	AnyDesk custom per-org client coverage: service normalization, trace files (ad_*), EventLog 7045, and Sigma detection rules		T1219: Remote Access Software

---

🚀 Projects & Security Arsenal

Project	Stack	Description
🏹 bugbounty-lab101	Shell · Recon	Bug bounty workspace: recon/vuln pipeline, report templates, scope enforcement
🧪 dev101x-pentest-lab	Docker · Python	Self-contained Pro Lab-style box: blind SQLi → pivot → SUID privesc, with live flag validation
🛡️ BDB-Guardian	PowerShell	Win Defender DoS defensive monitor (cited by CUHK ITSC, LOLBAS #525 & Atomic Red Team #3439)
🔒 pullgoscript	Go · Assembly	Windows credential-exposure audit toolkit & hardened 127.0.0.1 console (T1003/T1555/T1547/T1055)
🔍 shodan_reconsx	Python · Shodan	OSINT recon framework built on the Shodan API
🤖 cyhber-deploy	Python	Security skill layer for AI coding agents (Grade A on SkillsDirectory)

---

🛠️ Tech Stack

---

💼 Experience

Period	Role	Company
2026 — present	🛡️ Penetration Tester	Henkel · Switzerland (Remote · Part-time)
2022 — 2025	🏢 Chief Technology Officer	EXIA S.A.S — Cartagena, CO
2021 — 2024	💻 Associate Software Developer (QA & Testing)	Google (Affiliate / Extended Workforce)
2020 — present	🚀 Freelance · Offensive Security & AI	Independent

🎓 Education

Period	Degree	Institution
2024 — present	🤖 Master's in Artificial Intelligence	Universitat de Barcelona
2017 — 2021	🎓 Systems & Computer Engineering	Universidad Tecnológica de Bolívar
2013 — 2017	💡 Systems & Computer Technology	Universidad Tecnológica de Bolívar

---

📊 GitHub Stats

 

---

🎯 HackTheBox

_{Snapshot from November 2026 · click the card for live stats}

---

"Security is not a product, but a process. Code is poetry. Ship it."

_{⭐️ From DevCop95 · Colombian Ethical Hacker · Cartagena, Colombia 🇨🇴}