Denis Kolegov
Security Engineer at Asymmetric Research
The Hague, South Holland, Netherlands
Summary
🤩
Rockstar🎓
Top SchoolDenis Kolegov is a security engineer and cryptography specialist with over a decade of hands-on experience spanning applied cryptography, consensus protocols, smart contract security, and security research. He holds a PhD in Computer Security and has led and audited critical projects across blockchain, distributed systems, and network appliances—work that ranges from designing KMS and threshold signing services to adapting WireGuard for government standards. Denis has contributed to well-known open-source tooling (including modules for the Browser Exploitation Framework and WAF fingerprinting) and applies lightweight formal verification and invariant/fuzz testing to harden real-world protocols. Based in The Hague, he blends rigorous academic training with practical attack-defense expertise, often surfacing subtle implementation flaws (e.g., covert HTTP channels and WAF signature nuances) that others miss.
12 years of coding experience
9 years of employment as a software developer
Doctor of Philosophy - PhD, Computer and Information Systems Security/Information Assurance, Doctor of Philosophy - PhD, Computer and Information Systems Security/Information Assurance at Tomsk State University
Github Skills (19)
javascript10
python10
waf10
web-application-security10
ruby10
security-testing10
exploit10
go10
dns10
api-security10
network-security10
fingerprinting10
cookie10
test-automation9
bugtracking8
Programming languages (17)
Github contributions (5)
wallarm/gotestwaf
Jan 2021 - Oct 2021
An open-source project in Golang to asess different API Security tools and WAF for detection logic and bypasses
Role in this project:
Back-end Developer
Back-end DeveloperContributions:7 reviews, 15 commits, 40 PRs in 8 months
Contributions summary:Denis primarily contributed to refactoring and restructuring code within the `scanner` package, particularly in `testcase.go` and `scanner.go`. These changes involved modifying the core logic for test case loading, blocking checks, and pass condition evaluations. The user's work encompassed enhancements to the test execution flow, incorporating improvements to the configuration handling for the test scenarios, and generally aimed to improve maintainability and clarity.
golangweb-application-securityapisecurity-toolsgrpc-security
beefproject/beef
Nov 2014 - Mar 2015
The Browser Exploitation Framework Project
Role in this project:Security Engineer
Security EngineerContributions:5 commits, 1 PR in 4 months
Contributions summary:Denis added and updated modules related to browser exploitation techniques, specifically focusing on covert channels and cookie manipulation. Their work includes implementing DNS and ETag covert channels for data exfiltration. The commits demonstrate the ability to develop and integrate JavaScript code for client-side attacks and Ruby code for server-side DNS manipulation. The contributions also include modules for disclosing and stealing cookies from F5 BIG-IP systems.
browsersecuritypentestingexploitationbrowser-exploitation
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.