Kent Apostol

About Me

Hello! I'm Kent, an experienced offensive cybersecurity consultant with a strong background in penetration testing, vulnerability assessments, and bug bounty hunting. I have a proven track record of identifying critical vulnerabilities across diverse sectors, including finance, healthcare, and government agencies. Skilled in both manual and automated testing, I possess a comprehensive understanding of various attack vectors. I excel at clearly communicating technical findings to both technical and non-technical audiences.

My Achievements

• Achievement 1: In 2022, while still a student, Elosoft offered me a position as a regular security consultant after I reported and identified critical vulnerabilities in their web application. I assisted them in remediating each security issue I discovered on any site maintained by Elosoft.
• Achievement 2: BASF, a company based in Ludwigshafen, Germany, specializing in Chemicals, Performance Products, Functional Materials & Solutions, Agricultural Solutions, and Oil & Gas, recognized my work after I discovered a CRLF Injection vulnerability in their system. As a result, BASF decided to include my name in their 'Heroes of BASF' list or Security Researcher Hall of Fame.
• Achievement 3: Informatica, a software development company located in Redwood City, California, added my name to their Security Researcher Hall of Fame after I reported a CORS (Cross-Origin Resource Sharing) vulnerability in their system.
• Achievement 4: Liquid Pixels is an information technology company located in Rochester, New York. After I discovered a security issue in their system specifically, the exposure of the server-status page to the public I was able to exploit this vulnerability to monitor incoming requests and access sensitive endpoints used by their clients. Following this, Liquid Pixels awarded me a bug bounty reward worth $250.
• Achievement 5: Hivelocity is a hosting company based in Tampa, Florida, USA. After I successfully took over one of their subdomains, Hivelocity rewarded me with $50.
• Achievement 6: Tecno Mobile, headquartered in Shenzhen, China, is a leading producer of budget-friendly smartphones, tablets, and accessories, with a strong presence in Africa, South Asia, and the Middle East. After discovering an IDOR (Insecure Direct Object References) vulnerability in their application, Tecno awarded me the Safe Keeper badge for my contribution to their security.
• Achievement 7: MicroStrategy, a software development company based in Tysons Corner, VA, rewarded me with a bounty after I successfully took over one of their domains, contributing to the security of their company.

Certificates

• Official ISC2 Certified in Cybersecurity
• Cisco Networking Academy Certificate Introduction to Cybersecurity
• OPSWAT ACADEMY ICIP Certificate Introduction to Critical Infrastructure Protection
• Foundations of Cybersecurity Certificate by Google
• The Cyber Mentor - Practical Ethical Hacking Certificate
• CWL Certified Cyber Security Analyst [C3SA]
• Certified Appsec Practitioner (CAP)
• Multi-Cloud Red Teaming Analyst
• Certified Network Security Practitioner (CNSP)
• Certified Cloud Security Practitioner - AWS (CCSP-AWS)
• Certified Red Team Analyst (CRTA)

Contact

• Email
• LinkedIn Profile
• Western Visayas Iloilo City, Philippines