INITIALIZING
Available for Consulting

JOAS ANTONIO

DOS SANTOS

>>> _

Head of Cybersecurity & Engineer | Red Team Lead | Researcher | Author | Speaker | MITRE ATT&CK Contributor | iBest 2025 & 2026 Top Influencer

0+ Articles Written
0+ DOI Published
0+ Events & Talks
0 Countries
Get in Touch → GitHub
Joas Antonio dos Santos
JAS
MITRE ATT&CK
Red Team Lead
iBest 2025 & 2026
Top Voice
Scroll Down
<about>

WHO I AM

joas@security:~$ cat about.txt

$ My career is marked by a series of leadership roles: Senior Researcher, Red Team Lead, GRC Analyst, DevSecOps Specialist, vCISO Projects, Advisor and Mentor, Software Security Engineer, SysAdmin/DevOps, Cyber Threat Intelligence, AI Researcher and Blue Team Leader.

$ I'm a contributor to MITRE ATT&CK, actively delving into TTP research to advance threat intelligence.

$ Recognized as LinkedIn Top Voice and awarded iBest 2025 & 2026 - Top Influencer of Technology and Innovation.

$ University Teacher of Programming and Cybersecurity, Microsoft Educator and Innovator, Game Development Instructor, Mentor and Volunteer of social IT projects for young people and seniors.

$ Academic researcher with 20+ DOI published papers, 300+ articles and 300+ PDF contents across Artificial Intelligence, Quantum Computing, Child Safety, Biology, Cinematic Arts and more.

$ Passionate cinema enthusiast — author of 25 books, founder of disturbingmovies.com, a curated database of extreme and horror cinema, and founder of the Global Human Protection Alliance — building technology to combat child exploitation and human trafficking.

$ International speaker with 100+ events across 10+ countries.

$ _

Roles & Leadership

Red Team Lead vCISO Blue Team Leader DevSecOps GRC Analyst AI Researcher

Programming Languages

Python C# C/C++ Rust Lua JavaScript Golang PowerShell Assembly x86/x64 ShellScript MySQL

Achievements

300+ Articles & PDFs
20+ DOI Publications
25 Books Authored
100+ Speaking Events
10+ Countries
</about>
<skills>

SPECIALTIES

Offensive Security

PenTest (Web, API, Infrastructure, OT/IoT, Cloud, Wireless, Mobile Android/iOS), Red Team Operations, Purple Team Operations

Defensive Security

Blue Team Operations, Incident Response, Cyber Threat Intelligence, OSINT, Malware Analysis & Reverse Engineering

Application Security

SAST, DAST, SCA, Code Review, OWASP SAMM, Game Security, Software Security Engineering

AI & Machine Learning

NLP, ML/Deep Learning, MLOps, Prompt Engineering, AI-Powered Security Tools Development

Cloud & DevOps

AWS, Azure, GCP Security, Terraform, CI/CD, Kubernetes, Docker, GitOps, Multi-Cloud Architecture

Research & Education

MITRE ATT&CK Contributor, Academic Researcher, University Teacher, Microsoft Educator, Author & Speaker

</skills>
<repositories>

OPEN SOURCE

Featured repositories from github.com/JoasASantos

3.8k

OSCE3-Complete-Guide

Complete guide covering OSWE, OSEP, OSED, and OSEE certifications

Documentation
891

Red-Team-Management

Comprehensive Red Team management resources and methodologies

HTML
864

Offensivesecurity-Checklists

Checklists for testing security environments

Checklists
748

NeuroSploit

AI-powered penetration testing framework for automated offensive security

Python
650

Red-Team-Exercises

Practical Red Team exercises and attack simulation scenarios

C++
211

Offensive-AI-Agent-Prompts

Prompts for security testing using AI agents (Gemini, ChatGPT, Claude, Copilot)

AI/Prompts
46

BlueGuardian

Advanced Blue Team Security Analysis Framework powered by Multiple AI Models

Python
38

shellcode-tester-pro

Graphical tool for shellcode analysis, simulated execution, and reverse engineering

Python
15

DeepNudeDetect

Comprehensive protection against Deepfakes, Deepnudes & Harmful Content

Python
View All Repositories →
</repositories>
<publications>

PUBLICATIONS

Books Authored

The Long Career in Cybersecurity

Foundations, Specialization, and Leadership for a Thirty-Year Career

Cybersecurity

PsyOps — Como Você Está Sendo Enganado

Dois milênios de engenharia de consentimento

Media & Society

Introdução ao Red Team Operations 1 & 2

Offensive Security

Introdução à Segurança Ofensiva

Offensive Security

Como Desenvolver sua Inteligência

Self-Development

Táticas Internas: A arte de evoluir na era do agora

Self-Development

Leaks of True

Literature

Hérois de Papel

Literature

Introdução a Finanças Pessoais

Finance

Discussões Interdisciplinares - Vol. 4

Academic

Fronteiras da Ciência - Vol. 2 & 3

Academic

Avanços e Desafios em Ciências Aplicadas - Vol. 3

Academic

Digesto "Temas de Direito Digital e Tecnologia" 5ª Ed.

Digital Law

III South Florida Congress Development

Congress

Protocolo Sombra

Literature

O Cinema do Desconforto

Cinematic Arts

Necropolítica

Philosophy

A Geração Perdida Não Está Perdida

Self-Development

O Existencialismo

Philosophy

Tratado de Investigação Forense — Vol. I

Digital Forensics

Windows Internals na Prática: Da Win32 API ao NT Kernel

Systems Programming

Desenvolvimento de Malwares e Exploits & Técnicas de Evasão para Segurança Ofensiva e Operações de Red Teams

Offensive Security

Malware Development for Ethical Hackers

Technical Reviewer
Amazon Store Clube de Autores Free eBooks

Magazine Publications

Hakin9 Magazine

Brute Forcing and Supply Chain Attacks SQL Injection Attacks Burp Suite for Hackers Android Applications and Security Brute Force Techniques with MITRE ATT&CK Wireless Hacking Tools Hackers Toolset for 2022 Become a Bug Bounty Hunter The Power of Burp Suite Ransomware and Vulnerability Management Wi-Fi Hacking & Rogue Access Points Malware Attacks Cyber Kill Chain Hacking Career Jumpstart Cyberbiosecurity Blockchain Hacking Social Engineering Attacks Android Hacking Ethical Hacking Tools in Practice

eForensics Magazine

Linux Forensics and Security Building a Computer Forensic Lab Forensic Investigation of Storage Media Transforming Traces into Evidence Anatomy of Ransomware Attacks Corporate Forensic Investigations Cyber Forensics Laboratory Vol. 2 Mobile Forensics Starter Kit Forensics Investigations Case Studies

PenTest Magazine

Binary Exploitation API Testing Methodology & Tools

Academic Research

20+ DOI publications spanning Artificial Intelligence, Quantum Computing, Child Safety, Biology, and Cinematic Arts.

arXiv Papers

Thinking in Graphs: Neo4j-Backed Exploit-Chain Reasoning for LLM Penetration-Testing Agents arXiv:2610.20902 · Oct 2026 Autonomous Active Directory Exploitation via Multi-Model Harness Orchestration: A Benchmark Study with NeuroSploit on GOAD arXiv:2610.04243 · Oct 2026 Calibrated Decision Models for Autonomous Penetration-Testing Harnesses: JEV and Laya as System One Decision Layers for LLM-Driven Pentest Agents arXiv:2609.28940 · Sep 2026 From Capability to Assurance in Autonomous Penetration-Testing Harnesses: A Framework and Reference Implementation arXiv:2609.22664 · Sep 2026

TechRxiv Preprints

Adversarial Risk Mapping & Assessment (ARMA): A New Methodology for Offensive Security and Business Impact Analysis TechRxiv · 2025 Deepfakes — The New Evil of the New Age of (Mis)Information and Post-truth TechRxiv · Sep 2025 Generative Models: Architectures and Applications of GANs, VAEs, and Diffusion Models TechRxiv · Aug 2025 Artificial Intelligence for Combating Child Exploitation on Social Media TechRxiv · Aug 2025 Cyber Attacks against Critical Infrastructures: Analysis of Methods, SCADA Exploitation and Real Cases TechRxiv · Feb 2025 Deep Nude Detection Using Machine Learning Techniques TechRxiv · Oct 2024
iD View ORCID Profile View arXiv Profile View ResearchGate Profile

CVE Disclosures

30+ CVEs assigned across web applications, IoT/router firmware, medical imaging, and gaming software.

2026

CVE-2026-124578 Yaga · 2026 CVE-2026-124577 Yaga · 2026 CVE-2026-99191 Linux Kernel · Oct 2026 CVE-2026-98077 Linux Kernel · Sep 2026 CVE-2026-90141 Linux Kernel · Sep 2026

2023

CVE-2023-51230 Mitre CVE-2023-51229 Mitre CVE-2023-33701 Mitre CVE-2023-29988 Mitre

2022

CVE-2022-38593 Mitre CVE-2022-38590 XSS in GLPI · Mitre CVE-2022-38589 Mitre CVE-2022-38588 Mitre CVE-2022-36757 Mitre CVE-2022-32408 Mitre CVE-2022-31895 XSS · jQuery v3.1.1 in Inspinia Theme v2.8 · Mitre CVE-2022-31894 Insecure Permissions + LPE in DC Universe Online Launcher · Mitre CVE-2022-29333 Local Privilege Escalation in PowerDirector 14

2021

CVE-2021-44617 SQL Injection in GLPI · Mitre CVE-2021-42246 XSS in MedDream · Mitre CVE-2021-36487 Mitre

2020

CVE-2020-36145 Mitre CVE-2020-35703 Mitre CVE-2020-13363 Mitre CVE-2020-8830 CSRF in Ruckus Wireless CVE-2020-8829 CSRF in Intelbras CIP 92200 CVE-2020-8033 XSS in Ruckus Wireless R500 CVE-2020-7983 Mitre CVE-2020-5517 CSRF in BlueOnyx

2019

CVE-2019-19517 CSRF in Intelbras RF1200 router CVE-2019-19516 CSRF in Intelbras WRN 150 router CVE-2019-19515 XSS in Ayision Ays Wi-Fi repeater config CVE-2019-19514 XSS in SSID of Ayision Ays Wi-Fi repeater CVE-2019-17411 XSS / DoS in Intelbras WRN 150 router CVE-2019-17222 XSS / DoS in Intelbras WRN 150 router

2018

CVE-2018-18405 Mitre

Security Research & Vendor Reports

Responsible disclosure and security contributions reported to major vendors.

Chromium

Infinite loop in CSS HighlightRegistry iterator via set() overwrite — LiveCollectionIterator cursor reset DoS #544197475 · Fixed · Aug 2026 Missing IsEventDispatchAllowed() guard in animation cancellation + composite:"add" O(N²) hang bypass #544197474 · Assigned · Aug 2026 WebGPU compute shader missing execution timeout causes GPU process crash on macOS #544163124 · WAI · Aug 2026

Microsoft

MSRC Security Researcher Acknowledgment Reported · 2026

Apple

Apple Security Acknowledgment Reported · 2026
</publications>
<projects>

PROJECTS & VENTURES

Red Team Leaders

EdTech platform delivering cybersecurity courses and training programs for aspiring red team professionals

Visit Platform →

History of Hackers

A comprehensive project documenting the history and evolution of hacking culture and cybersecurity

Explore →

Yen Programming Language

Creator of Yen, a custom programming language designed with unique paradigms and capabilities

Learn More →

YouTube Channel

Security tutorials, research breakdowns, and educational content on offensive and defensive cybersecurity

Watch Now →

Disturbing Movies

A curated database of extreme, horror, and transgressive cinema for enthusiasts of the genre's darkest corners

Explore →

Global Human Protection Alliance

Open-source organization building technological solutions to combat child exploitation and human trafficking worldwide

View on GitHub →
</projects>
<contact>

GET IN TOUCH

Looking for cybersecurity consulting, speaking engagements, or collaboration? Let's connect.

Email contato@joasantonio.com
LinkedIn Top Voice joas-antonio-dos-santos
GitHub JoasASantos
GitLab JoasASantos
YouTube - Security @JoasAntonioSecurity
YouTube - Cinema @OHackerCinefilo
X (Twitter) @C0d3Cr4zy
Instagram @joasantonio.s
ORCID 0009-0003-1772-9826
10
COUNTRIES
</contact>