Quentin Kaiser
Teacher at Konkrete Security
Brussels Metropolitan Area Belgium
Summary
🤩
Rockstar🎓
Top SchoolQuentin Kaiser is a security researcher and teacher based in Brussels with 14 years of hands-on experience in vulnerability research, exploit development, and firmware/binary analysis for embedded and IoT/IIoT devices. As Lead Security Researcher at ONEKEY and an independent consultant, he has a track record of discovering high-severity CVEs and contributing exploit modules to Metasploit, demonstrating practical impact on widely used security tooling. He’s also a significant contributor to unblob, adding handlers for many archive and filesystem formats—reflecting deep reverse-engineering and file-format expertise beyond typical pentesting skill sets. Quentin blends research with education, teaching vulnerability exploitation at HELMo and sharing findings via advisories and talks, and he enjoys collaborating on open-source tooling that advances automated firmware analysis.
14 years of coding experience
7 years of employment as a software developer
Bachelor's degree, Computer Sciences, Bachelor's degree, Computer Sciences at HELMo Liège
English, French
Github Skills (29)
data-analysis10
python10
apidoc10
filetype10
c-programming10
webscraping10
file-format10
exploit10
api10
rest-api10
yara10
bzip9
lzma9
linux9
geolocation9
Programming languages (14)
Github contributions (5)
onekey-sec/unblob
Nov 2021 - Jan 2023
Extract files from any kind of container formats
Role in this project:
Back-end Developer & File Format Engineer
Back-end Developer & File Format EngineerContributions:12 releases, 756 reviews, 224 commits in 1 year 2 months
Contributions summary:Quentin contributed significantly to the `unblob` repository by adding support for various archive and filesystem formats. Their work involved implementing handlers for formats like SquashFS, CramFS, ARC, DMG, ISO9660, LZO, Bzip2, LZIP, LZMA, LZ4, StuffIt, LZH, XZ, and ZSTD, and enhancing existing handlers. The user's contributions included writing YARA rules, defining C structures for parsing, and implementing extraction commands, demonstrating a focus on reverse engineering and file format analysis. The user also fixed issues related to file padding, extraction failures, and file path handling.
containersextractionpythoncompressiondocker
rapid7/metasploit-framework
Aug 2016 - Dec 2020
Metasploit Framework
Role in this project:Security Engineer
Security EngineerContributions:33 reviews, 133 commits, 9 PRs in 4 years 4 months
Contributions summary:Quentin contributed multiple exploit modules targeting vulnerabilities in various Trend Micro and Cisco products. The modules included exploits for remote code execution (RCE) and credential extraction vulnerabilities. These exploits targeted systems such as the Trend Micro Smart Protection Server, Trend Micro SafeSync, AwindInc, and Cisco RV series routers. These contributions demonstrate a focus on identifying and exploiting security weaknesses in network and security appliances.
metasploitmetasploit-framework
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.