Léo Draghi

Graduated with a Master of Science in engineering with a specialization in Cyber Security and certified 'Offensive Security Certified Professional' (OSCP).

I have acquired valuable experience in penetration testing and an in-depth knowledge of the languages, technologies, tools and methodologies that govern this domain by carrying out numerous missions for various clients. These missions are mainly Grey box penetration tests of web applications, e-banking solutions or APIs, based on OWASP guidelines and combining automated tools and manual techniques to identify vulnerabilities. I also assessed internal and external network infrastructures (e.g. Active Directory, Citrix,ATM).

These missions include leading the kick-off meeting with clients, identifying possible vulnerabilities, creating a detailed penetration test report explaining the identified vulnerabilities, assessing their severity and detailing recommendations to mitigate the vulnerabilities found, while adapting these recommendations on a case-by-case basis, and finally, presenting the assessment results to a technical and executive audience.

Vulnerability Disclosure: CVE-2024-28734, CVE-2024-28735, XSS in Microsoft Power BI Report Server