Status: Pedro Augusto de Oliveira

Pedro Augusto de Oliveira

@flameee

class

Offensive Security · Pentester · Researcher

conditionFine

profile

I work in offensive security: penetration testing, red team operations and social engineering across web applications, APIs, networks and cloud environments. Outside client work, I do security research through CTFs and bug bounty.

I approach AI agents like any other target: where they place trust, which authority they assume, which inputs they accept. I build AI-powered pentesting tools and right now I am focused on LLM security, from direct prompt injection (role-play, encoding, context flooding) to indirect injection through poisoned tool responses, malicious documents and cross-context leakage.

skills

  • Web/API
  • Infra/AD
  • Cloud
  • Mobile
  • Reverse engineering
  • AI tooling

career

  1. Oct 2025 – present

    Mid-level Security Analyst (Red Team)

    Stefanini Cyber · Brazil

    • Attack simulations and penetration tests, including exploitation and post-exploitation; phishing and social engineering campaigns.
    • Threat modelling with MITRE ATT&CK; technical and executive reports alongside the Blue Team.

  2. Apr 2025 – Oct 2025

    Offensive Security Engineer

    Kyntra.io · Brazil

    • Offensive tooling and pentest automation; AI-powered pentest tools that bring LLMs and autonomous agents into recon, vulnerability analysis and exploitation.
    • PoCs, custom scripts and in-house exploits; offensive security built into CI/CD (DevSecOps).

  3. Dec 2022 – May 2025

    Full-Stack Developer

    Nexum Tecnologia · Bauru

    • Java (Spring Boot) and Vue.js modules; OWASP Top 10 and SAMM practices.
    • Automation for CRM and billing systems; offensive security in development pipelines.

  4. Oct 2021 – Nov 2022

    Tier 1 IT Support Intern

    Servimed Ltda · Bauru

    • User support and troubleshooting, log analysis, network and security configuration.

key items

  • Red Team Analyst

    certification · CyberWarfare Labs · Sep 2025 – Oct 2025

    APT simulation, Active Directory, evasion, lateral movement, persistence and exfiltration.

  • Web Hacking & Hacking Club

    certification · Crowsec EdTech · Sep 2024 – Sep 2025

    Hands-on web and infrastructure pentesting, DevSecOps, red team simulations and phishing.

  • Bachelor of Computer Science

    degree · Faculdades Integradas de Bauru (FIB) · Jan 2021 – Dec 2024

    Final project: an automated vulnerability scanner based on the OWASP Top 10 (Flask + React).

records

HackingClub · Ded.Flame (opens in a new tab)

rank
Marechal
competitive
#8 global
general
#58 global
xp
34,760
machines
49 / 314
challenges
71 / 150
badge
Insurgency (insane Windows machine)

updated nov.03 2026

training log

14 courses · 540 h
  • 2025AI HackingCrowsec EdTech · 10 h
  • 2025Introduction to Offensive Security with AIUdemy · 30 h
  • 2025The Complete Agentic AI Engineering CourseUdemy · 30 h
  • 2025LLM Engineering: Master AI, Large Language Models & AgentsUdemy · 30 h
  • 2025RedPhishCrowsec EdTech · 10 h
  • 2025Privilege Escalation WorkshopCrowsec EdTech · 10 h
  • 2025DevSecOpsCrowsec EdTech · 20 h
  • 2025Web Hacking 3.0Crowsec EdTech · 120 h
  • 2024ISO 27001Nexum Tecnologia · 10 h
  • 2024Hacking for BeginnersCrowsec EdTech · 10 h
  • 2024AI and Python FundamentalsRocketseat · 45 h
  • 2024Spring Boot FundamentalsRocketseat · 15 h
  • 2022Java and Object-Oriented ProgrammingAlura · 121 h
  • 2022Programming for BeginnersAlura · 79 h

languages

Portuguese
Native
English
B2