Cristiano Maruti

Principal Security Consultant at Self-Employed

Crema, Lombardy, Italy
email-iconphone-icongithub-logolinkedin-logotwitter-logostackoverflow-logofacebook-logo
Join Prog.AI to see contacts
email-iconphone-icongithub-logolinkedin-logotwitter-logostackoverflow-logofacebook-logo
Join Prog.AI to see contacts

Summary

🤩
Rockstar
Cristiano Maruti is a Principal Security Consultant with over 20 years in information security and 13 years of hands-on experience delivering offensive and defensive services for large enterprises. He leads red team strategy and execution at BIP, designs enterprise vulnerability management and adversary emulation programs, and advises on emerging domains like connected vehicles, IoT, ICS and 5G. Technically fluent across reverse engineering (x86/x64/ARM/MIPS), malware analysis, NSM and DFIR, he also bridges people, processes and governance—shaping ISMS, GRC and compliance programs. An active contributor to security tooling (notably enhancements to DNS enumeration and vivisect vtrace tracing with x64 support), he combines deep engineering chops with pragmatic client-facing delivery and team growth. Colocated in Crema, Italy, he maintains an independent research practice and a strong track record in bug bounty platforms, demonstrating both curiosity and measurable impact.
code13 years of coding experience
job11 years of employment as a software developer
languagesEnglish, Italian
github-logo-circle

Github Skills (14)

debugging10
debug10
reverse-engineering10
dns10
enumerate10
python10
enumeration10
disassembly9
dis9
emulation9
64-bit8
x86-648
github-ci4
githubaction-workflow4

Programming languages (7)

TypeScriptShellCPHPHTMLRubyPython

Github contributions (5)

github-logo-circle
darkoperator/dnsrecon

Apr 2017 - May 2020

DNS Enumeration Script
Role in this project:
userBack-end Developer
Contributions:7 commits, 5 PRs, 1 comment in 3 years 1 month
Contributions summary:Cristiano primarily contributed to the core functionality of the DNS enumeration script. They added a new subdomain enumeration method using Bing search and subsequently reverted it. They also added a new enumeration method with Yandex search. Further changes included fixing Python 3 environment compatibility issues and various minor code adjustments.
enumerationpythondnsdns-record
vivisect/vivisect

Dec 2014 - Jan 2023

Role in this project:
userBack-end Developer
Contributions:2 reviews, 7 commits, 2 PRs in 8 years 3 months
Contributions summary:Cristiano primarily contributed to the `vtrace` component, focused on debugging and tracing functionality. Their work involved modifying the `VerboseNotifier` class, enhancing the output and debugging information for various trace events. The commits demonstrate a focus on improving the clarity and usefulness of the tracing output, specifically for signals, breakpoints, thread events, and library loading/unloading. They also integrated x64 support and updated codeblocks analysis.
disassembleremulationreverse-engineering
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.
Request Free Trial
Cristiano Maruti - Principal Security Consultant at Self-Employed