Breaking real-world systems to understand how to secure them.

I'm Florian Kabashi, an offensive security engineer from Kosovo working on web & API penetration testing, vulnerability research, reverse engineering and AI security.

I spend most of my time researching how systems fail — from web applications and open-source software to Windows kernel drivers, game clients, drone autopilots and AI-powered systems.

📍 Open to penetration testing, red team and security research roles — remote or relocation (Germany, Switzerland, EU).

• 🐞 CVE-2026-73328 — authenticated RCE in an open-source web application, coordinated via VulnCheck (write-up after disclosure, Dec 2026)
• 🚩 DEF CON CTF Qualifiers 2026 — Top 20 / 686 teams with KSAL Cyber Team
• 🥈 BSides Prishtina CTF — 2nd place
• 🌍 CTFtime — team #74 globally, #1 in Albania
• 🎯 Hack The Box — Top 900 global ranking
• 🇽🇰 Kosova Cyber Team — national selection finalist (ECSC pipeline)

Vulnerability Research
├── Open-Source Security (CVE hunting)
├── Windows Internals & Kernel Drivers
├── Fuzzing & Memory Corruption
├── Drone / MAVLink Protocol Security
└── AI / LLM & Agent Security

Offensive Security
├── Web & API Penetration Testing
├── Privilege Escalation
├── Reverse Engineering
├── Binary Exploitation
└── AI Red Teaming

CTFs
├── Web
├── Pwn
├── Reverse Engineering
└── Misc / AI Security

Languages

Python C/C++ Bash PowerShell PHP JavaScript

Security

Burp Suite Ghidra GDB / pwndbg pwntools AddressSanitizer Nmap Nuclei ffuf Metasploit Wireshark

Infrastructure

Linux Docker Git VMware Hyper-V

• AgentBait — lab showing how fake tool-provenance metadata ("official", "reviewed") steers LLM agents: 0/30 → 29/30 tool selection, and 30/30 canary exposure when tool selection is treated as authorization (0/30 with an independent authz check)
• Multi-Agent Penetration Testing Framework — autonomous agents for recon, vulnerability discovery and exploitation planning
• God's Eye View — OSINT & spatial-intelligence platform (aircraft, maritime, satellite and infrastructure data with provenance and timelines) — open-source release planned

I prefer reproducible research: understanding the underlying code, validating findings locally, and documenting the technical root cause.

• Multi-Agent System for Penetration Testing
• LockBit 5.0: Inside the Most Ruthless Cybercrime Operation of Our Time
• When a Rebrand Turns Into an Attack Surface: The Moltbot Impersonation and Malware Campaign

KSAL Cyber Team — a cybersecurity CTF and research community from Kosovo and Albania, focused on red teaming, blue teaming, network security and competitive cybersecurity.

LinkedIn: Florian Kabashi
TryHackMe: Nikooo
CTFtime: Team profile