Gianni Amato
CERT-AgID at Agenzia per l'Italia Digitale
Rome, Lazio, Italy
Summary
🤩
Rockstar🎓
Top SchoolGianni Amato is a senior security researcher with 14 years' experience, currently serving at CERT-AgID within Italy’s Agency for Digital Italy and teaching at Link Campus University. He spent nearly a decade as a Senior IT Security Consultant at CERT-PA, specializing in malware and threat analysis and helping shape national incident response capabilities. A hands-on backend developer in open-source projects like peframe and knock, he has deep expertise in static analysis of PE files and practical tooling for subdomain enumeration. Based in Rome, he combines academic teaching with government cyber defense work, bringing both operational incident response and developer-level contributions to the security community. Notably, his peframe contributions focus on core parsing and file/URL extraction logic, reflecting a focus on reliable, forensic-grade analysis components.
14 years of coding experience
9 years of employment as a software developer
Ingegneria, Ingegneria at Università di Catania
English
Github Skills (8)
regular-expression10
dns10
subdomain10
python10
file-parsing10
yara9
network-scan9
open-source8
Programming languages (2)
Github contributions (5)
guelfoweb/peframe
Mar 2014 - Jul 2021
PEframe is a open source tool to perform static analysis on Portable Executable malware and malicious MS Office documents.
Role in this project:
Backend Developer
Backend DeveloperContributions:4 releases, 143 commits, 6 PRs in 7 years 5 months
Contributions summary:Gianni's contributions primarily revolve around the core functionality of `peframe`, focusing on the analysis of Portable Executable files. They have made substantial modifications to the `pefile.py` and `pecore.py` modules, suggesting a focus on the program's core logic and file processing capabilities. Several commits involve updates and improvements to the file and URL extraction and detection features within the tool, enhancing its ability to identify and categorize file types and web resources. This indicates a strong engagement with the fundamental analysis processes of the tool.
ms-office-documentssecuritymaliciousanalysisexe
guelfoweb/knock
Feb 2014 - Jan 2023
Knock Subdomain Scan
Role in this project:Back-end Developer
Back-end DeveloperContributions:17 releases, 2 reviews, 312 commits in 9 years
Contributions summary:Gianni's primary contribution was the initial development of the Knock Subdomain Scan tool, a Python-based project. Their work involved the creation of the core functionality, as evidenced by the initial commit with the knock.py file. Subsequent commits refined the tool, addressing output formatting and implementing features to bypass wildcard DNS entries by modifying the knockcore.py module.
scanknockbugbountysecurityinfosec
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.