Skip to content
View licitrasimone's full-sized avatar
🎯
Focusing
🎯
Focusing

Block or report licitrasimone

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
licitrasimone/README.md

Hi, I'm Simone Licitra 👋

Red Team Specialist · Penetration Tester · AI/LLM Security Researcher

I'm focus on offensive security, red team operations, penetration testing, and helping organizations improve their security posture through realistic adversary simulation and practical remediation.

I graduated in December 2024 with a Master's degree in Computer Engineering, where my thesis, Leveraging AI Techniques for Automated Security Incident Response, explored how AI can support SOC automation, incident response, and defacement monitoring.

My work sits at the intersection of:

  • Red Team Operations — adversary simulation, C2 tradecraft, OPSEC, Active Directory attack paths
  • Penetration Testing — web, API, mobile, infrastructure, and wireless assessments
  • AI/LLM Security — prompt injection, jailbreak testing, agent/tool abuse, data leakage, and AI security automation
  • DevSecOps — secure SDLC, pipeline hardening, SAST/DAST/SCA, and security-by-design
  • Security Research & Tooling — building practical tools for offensive security and security automation

🎖️ Certifications

  • OSCP — Offensive Security Certified Professional
  • CRTO — Certified Red Team Operator
  • CRTL — Certified Red Team Lead
  • CPTS — Certified Penetration Testing Specialist
  • PAPA - Practical AI Pentest Associate

🔬 Current Research & Projects

A security testing framework for AI/LLM systems, built to help penetration testers and red teamers assess AI endpoints for prompt injection, jailbreaks, system prompt extraction, data leakage, tool abuse, and agent exploitation.

A Crystal Palace evasion kit port for Sliver C2, bringing Crystal-Kit style tradecraft into a Sliver-focused workflow.

My Master's thesis project on using AI techniques to automate and streamline SOC incident response workflows.

🧠 Areas of Interest

  • Offensive security and red teaming
  • AI/LLM security testing
  • Vulnerability research
  • C2 framework tradecraft
  • Malware analysis and evasion research
  • Mobile application security
  • Security automation and SOAR
  • Secure software engineering
  • Blockchain and smart contract security

🌐 Find Me Online

Website LinkedIn Medium Hack The Box X

Tech Stack

Offensive Security Tools

Cobalt Strike Sliver Burp Suite Frida Metasploit Nmap Volatility Radare2/Ghidra BloodHound OWASP ZAP

DevSecOps

Azure DevOps Jenkins Snyk SonarQube Docker SAST DAST SCA

Web & Application Security

Node.js Angular React JavaScript REST API gRPC Protobuf Spring

Databases & Infrastructure

PostgreSQL MySQL MongoDB AWS Active Directory VPN TLS/SSL

Programming Languages

Python C C++ Java Kotlin Rust PowerShell Bash Solidity

Cyber Security Expertise

Penetration Testing Red Team Operations Mobile Security AI/LLM Security Vulnerability Research Digital Forensics Security by Design

Computer Architecture

Assembly for MIPS64 Gem5 Tomasulo's algorithm ARM Architecture Keil uVision

Pinned Loading

  1. aix-framework aix-framework Public

    AI Penetration Testing Framework

    Python 49 4

  2. ecc-dragonfly ecc-dragonfly Public

    implementation of Dragonfly Exchange using ECC

    Go

  3. ethereum/ethereum-org-website ethereum/ethereum-org-website Public

    Ethereum.org is a primary online resource for the Ethereum community.

    Markdown 6k 5.4k