Rami Ben Fredj

Designed and integrated Okta single sign-on and bearer-token authorization across an ASP.NET API suite to implement access control and secure inter-service communication. Built and productionized multiple ASP.NET web applications and developed Logstash ingestion pipelines with automated testing coverage improvements.

Performed end-to-end Windows Active Directory compromise chains and web exploitation from initial access through privilege escalation and post-exploitation. Also implemented authenticated exploitation chains including deserialization and injection-based RCEs, token abuse, and credential attacks.

Penetration tester with offensive security experience across network, web, API, binary, and cryptographic exploitation. Comfortable across reconnaissance, exploitation, privilege escalation, and post-exploitation on Windows and Linux targets.

Researched MD5 collision methodologies and reimplemented a Stevens C++ attack in Python with documentation. Demonstrated practical MD5 collision construction to support migration away from MD5 toward stronger hashes.

Completed offensive security exercises including network topology mapping, Windows exploitation, and web/session attacks. Practiced privilege escalation via cryptographic weaknesses and gained RCE through memory corruption on 32-bit Linux.

Activities and societies: Relevant coursework includes Advanced Network Security, Industrial Network Security, and Advanced Internet Technology.

Master of Science student in Computer Science at RWTH Aachen, focusing on advanced network, industrial network, and internet security topics.

Activities and societies: Bachelor's thesis: Cryptanalysis of MD5—reimplemented collision methods (including Stevens) in Python and documented the approach.

Bachelor of Science in Computer Science at TU Dortmund University, including a thesis on cryptanalysis of MD5 collision methods.