Ewerson Guimaraes
Principal Security Engineer at DcLabs Security Team
Berlin, Germany
Summary
👤
Senior🎓
Top SchoolEwerson Guimaraes is a Principal Security Engineer based in Berlin with 13 years of hands-on experience in offensive security, Red Team operations, and penetration testing across enterprise and industrial environments. Currently leading security efforts at Zalando and previously guiding teams at EPAM and ABB, he combines deep vulnerability research with practical exploit development—his Metasploit contributions include a module targeting Uptime software that enables file upload and remote code execution. A founder of the BHack Conference and longtime practitioner at DcLabs, he blends community leadership with real-world adversary techniques and privilege escalation expertise. He holds an MBA in CyberSecurity and a bachelor’s in Computer Science, reflecting a formal grounding paired with extensive field experience. Known for turning complex attack paths into repeatable assessments, he brings both strategic oversight and the ability to deliver proof-of-concept exploits.
13 years of coding experience
7 years of employment as a software developer
Fédération Internationale de l'Art PhotographiqueNetworking Manager Redes, Networking Manager Redes at Centro Universitário UNABarchelor Computer Science Computação, Barchelor Computer Science Computação at Universidade FUMEC - Oficial
English, Portuguese
Github Skills (6)
metasploit10
vulnerabilities10
exploit10
vulnerability10
ruby10
php8
Programming languages (5)
Github contributions (5)
rapid7/metasploit-framework
Aug 2012 - Oct 2015
Metasploit Framework
Role in this project:
Security Engineer
Security EngineerContributions:15 commits, 2 PRs, 6 comments in 3 years 2 months
Contributions summary:Ewerson's commits focus on a Metasploit module designed to exploit a vulnerability in Uptime software, specifically for versions 7.4.0 and 7.5.0. This module allows for file upload and arbitrary command execution, leveraging privilege escalation techniques. The changes involve modifications to the `uptime_code_exec.rb` file, which likely implements the exploit logic and interaction with the vulnerable Uptime instance.
metasploitmetasploit-framework
crashbrz/kalihealthcheck
Feb 2017 - Jan 2019
Contributions:28 commits, 2 PRs, 27 pushes in 1 year 10 months
configslinuxkali-linuxkalidotfiles
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.