Lorenzo Stella

Lorenzo Stella

Schio, Veneto, Italy
1K followers 500+ connections

About

Senior Information Security Specialist.

My main focus is on Application Security Testing and Security Research / R&D consulting for globally renowned clients. I collaborate daily with multiple teams of skilled security engineers from different companies, having a big influence on implementing security processes and closing security gaps in fast-growing environments.

In the past I have focused extensively in multiple disciplines of the Information Security field including Vulnerability Assessment and Penetration Testing (VA/PT), Secure Coding Practices & SSDLC, DevSecOps/Rugged DevOps/SRE Security, and Exploit R&D. My career experience also includes designing and implementing a wide variety of security solutions, which has resulted in a broad background in technologies and secure infrastructure planning, transformation, and delivery.

I graduated from the University of Milan in AY. 2017/2018 and received a BS in Computer Systems and Networks Security.

You can find me over at:
https://lorenzostella.it/
http://pequalsnp-team.github.io/
http://jbzteam.github.io/
https://twitter.com/lorenzostella

Activity

Join now to see all activity

Experience

  • Wave Mobile Money Graphic

    Wave Mobile Money

    Vicenza, Veneto, Italia

  • -

  • -

  • -

    Padova Area, Italy

  • -

    Cremona Area, Italy

  • -

  • -

    Liverpool, United Kingdom

  • -

    Valdagno (VI), Italy

Education

  •  Graphic

    -

    Activities and Societies: CTF Team 'JBZ' https://jbzteam.github.io - CTF Team 'PequalsNP' https://pequalsnp-team.github.io

  • -

    Activities and Societies: Avilug (Linux User Group AltoVicentino: http://avilug.zapto.org), TronWeb (http://www.tronweb.it)

    Perito Industriale Capotecnico Spec. Informatica (ABACUS)

Volunteer Experience

  • Electronic Frontier Foundation Graphic

    IT Security Consultant

    Electronic Frontier Foundation

    - Present 7 years

    Civil Rights and Social Action

    I helped conduct a secure code review and vulnerability assessment for Privacy Badger, a browser add-on from the Electronic Frontier Foundation (EFF) that stops advertisers and other third-party trackers by blocking racking cookies that do not respect the "Do Not Track" setting in a user's web browser.
    I am registered as a member since 2017.

  • Associazione della Croce Rossa Italiana Graphic

    Soccorritore base

    Associazione della Croce Rossa Italiana

    - 1 year 1 month

    Social Services

    Abilitazione OPEM

Projects

  • Electronegativity: identify misconfigurations and security anti-patterns in Electron applications

    - Present

    Electronegativity is a tool to identify misconfigurations and security anti-patterns in Electron-based applications. It leverages AST and DOM parsing to look for security-relevant configurations, as described in the "Electron Security Checklist - A Guide for Developers and Auditors" whitepaper:
    https://doyensec.com/resources/us-17-Carettoni-Electronegativity-A-Study-Of-Electron-Security-wp.pdf
    Software developers and security auditors can use this tool to detect and mitigate potential…

    Electronegativity is a tool to identify misconfigurations and security anti-patterns in Electron-based applications. It leverages AST and DOM parsing to look for security-relevant configurations, as described in the "Electron Security Checklist - A Guide for Developers and Auditors" whitepaper:
    https://doyensec.com/resources/us-17-Carettoni-Electronegativity-A-Study-Of-Electron-Security-wp.pdf
    Software developers and security auditors can use this tool to detect and mitigate potential weaknesses and implementation bugs when developing applications using Electron. A good understanding of Electron (in)security is still required when using Electronegativity, as some of the potential issues detected by the tool require manual investigation.

    See project
  • `detect_antivirus`​ module for BeEF

    I created a module for the Browser Exploitation Framework Project (BeEF) to passively detect potential antiviruses installed on a target machine. Currently it supports Kaspersky, Avira, Avast (ASW), BitDefender, Nortona, and Dr. Web.

    See project
  • jsClean: an unpacker/deobfuscator

    jsClean is an unpacker/deobfuscator for javascript sources. This Node.js script combines several deobfuscation techniques, even relocating the strings array in the input source (a common obfuscation) to improve the readability for reverse engineering purposes.

    See project
  • OSSH: Open Source Security Hub

    The Open Source Security Hub (OSSH) idea came up after the local OWASP chapter raised the need for a system aiming at bringing together security experts and projects in need. I quickly realized I could help out by building it as a project for my mobile- and web-programming course at the university. Taking the example of many platforms focused on crowdsourced security (Bugcrowd, HackerOne, Crowdcurity, Synack) I opted to develop a framework to make the process simple and intuitive.

    See project
  • Squarify Bot

    Don't let Twitter to crop your pics!
    Many social networks require you to crop your profile pic, making it fit in a square. Squarifybot lets you solve this problem in an easy way

    See project
  • Ghetti Trasporti S.r.l. website

    A business website for a transport company based in Padua (Villa Estense).

    See project
  • Revamp Movies

    Revamp is a web application for the streaming of indipendent and historic films.

    Other creators
    • Giulio Perin
    See project
  • Team Jestion's coming soon parallax

    A parallax experiment for a countdown of the release of a video.

    See project
  • CutBack

    Chrome extension to close tab groups for subject, automatically classified combining TF/IDF & hierarchical tabs.

    See project
  • Team Jestion's page

    The Team Jestion's official page, built with LESS, CSS3 and HTML5; fully responsive.

    See project
  • Perché non dovresti usare PHP

    Initiative to propose efficient alternatives to php

    See project
  • Image Placeholder API with Play framework

    A Custom Image Placeholder service, fully customizable, built with Play framework 2.1.x.
    https://github.com/phosphore/CustomImagePlaceHolder/

    See project
  • Icon designer (The Noun Project)

    - Present

    Icon sets with +20k downloads

    See project
  • APInions

    -

    A RESTful API framework to handle votes and surveys, via JSON requests. It provides a simple way for mobile apps developers to send surveys and display/manage them in a dashboard.
    It's written in Java (backend) and Scala (frontend), storing data in MySQL.

    See project

Languages

  • Italiano

    Native or bilingual proficiency

  • Inglese

    Full professional proficiency

  • Francese

    Elementary proficiency

Organizations

  • JBZ CTF Team

    -

    - Present

    JBZ is one of the few high-ranking Italian CTF teams, which gathers security-minded people from Italy. There are students, professionals, academic researchers and infosec enthusiasts. Capture the Flag (CTF) is a special kind of information security competitions. CTF games often touch on many other aspects of information security: cryptography, stego, binary analysis, reverse engeneering, mobile security and others. Good teams generally have strong skills and experience in all these…

    JBZ is one of the few high-ranking Italian CTF teams, which gathers security-minded people from Italy. There are students, professionals, academic researchers and infosec enthusiasts. Capture the Flag (CTF) is a special kind of information security competitions. CTF games often touch on many other aspects of information security: cryptography, stego, binary analysis, reverse engeneering, mobile security and others. Good teams generally have strong skills and experience in all these issues. https://jbzteam.github.io/

  • The Noun Project

    Translator and Reviewer

    - Present

    The Noun Project is a website that aggregates and catalogs symbols that are created and uploaded by graphic designers around the world. Based in Los Angeles, the project functions both as a resource for people in search of typographic symbols and a design history of the genre. I'm a translator and a reviewer for the Italian version since 2011.

More activity by Lorenzo

View Lorenzo’s full profile

  • See who you know in common
  • Get introduced
  • Contact Lorenzo directly
Join to view full profile

People also viewed

Explore collaborative articles

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.

Explore More

Others named Lorenzo Stella in Italy