• Object-C / iOS SDK
• Java/ Android SDK
• Android.fragments,Android.Android.Location,Android.Hardware,Android.Net,
• Android.Nfc,Android.Os,Android.Animation, Android.Graphics,
• Android.Preference, Android.Utils, Android.View, small knowledge of OpenGl 2.0.
• Low level programming
• C (linux 3.x in kernel space) and driver developing, i386 asm, ppc asm
• Web development
• HTML / HTML5,JavaScript.
• Apache.
• Databases
• MySQL,SQLite,SQL,Oracle.
• System Administration
• Linux 2.x,3.x,*nix-bsd like systems (OpenBsd,NetBsd),Os X, Windows Server (all
• verisons).
• Security penetration testing
• Kali linux, Metasploit framework, Nessus vulnerability scanner, Burp proxy (web
• penetration testing).

*** ****

Education: 2014-> Current OSCP certification

2007-> Current MSc Computer Science,

University of Udine, Italy

– I’m writing the final thesis on mobile security with the title “Exploitation and

vulnerability assessment on mobile platfoms”

2004-2007 BSc Computer Science, GPA: 3.8/4.0

University of Udine, Italy

– With the final work : “Exploitation in Mac OS X i386 and PPC architecture”

I’ve followed a iter based on it-security (Penetration testing, exploitation,

vulnerability assessment, with live labs, and deep focus on different architectures,

from solaris to i386)

2004 High-school.

Private school. G. Bertoni, Udine

Technical: Object-C / iOS SDK

Java/ Android SDK

Android.fragments,Android.Android.Location,Android.Hardware,Android.Net,

Android.Nfc,Android.Os,Android.Animation, Android.Graphics,

Android.Preference, Android.Utils, Android.View, small knowledge of OpenGl 2.0.

Low level programming

C (linux 3.x in kernel space) and driver developing, i386 asm, ppc asm

Web development

HTML / HTML5,JavaScript.

Apache.

Databases

MySQL,SQLite,SQL,Oracle.

System Administration

Linux 2.x,3.x,*nix-bsd like systems (OpenBsd,NetBsd),Os X, Windows Server (all

verisons).

Security penetration testing

Kali linux, Metasploit framework, Nessus vulnerability scanner, Burp proxy (web

penetration testing).

Summary: I’ve worked in different companies in Italy with different roles: from low level

developing (Arm assembly),exploit developer (i386-ppc assembly) to high level one

(Java-ObjC).

I’ve spent also one year in London working in Canary Wharf at European Medicine

Agency.

Currently i’m working as mobile developer. I think that mobile it’s the future and I try

to learn everything about mobile platforms (from iOS to Android).

I learn new programming languages and technologies quickly acquiring skills when

necessary. When facing a software design problem I think creatively in order to

resolve it.

I love team working, and a challenging environment,and collaboration in order to

goal the company obiectives quickly and in a smart way.

Currently I follow all the underground security (e-zines etc) and I try to update my

knowledge everyday.

Employment Summary:

February 2014 – March 2014

Collaboration with PenTest Magazine in the issue : https://pentestmag.com/mobile-pentesting/ for the

article on “Android insecurity”.

November 2013-February 2014

Remote iOS/Android Developer for http://www.bluemoz.com/ for Unilever (Dove brand).

All two application are written for the Dove Camera Courage marketing available on App-Store :

https://itunes.apple.com/it/app/dove-self-esteem/id715657044?mt=8 for Apple iPad an iPhone,

and on Google play market https://play.google.com/store/apps/details?id=com.bluemoz.dove&hl=en

for Android 4.x devices.

February 2012-Current

Currently i’m mobile software developer following the develop as main lead developer of a projects.

• Heineken : Client-server multiuser apk, thinked for a 4.x Android tablet. Heineken wants an

application to collect data for their managers, for doing photo of the pub, resturant etc. and

storing technical commercial information in order to have a commercial strategy to share with

their other sub managers.This application is a big collector and all the data is syncronized with

server to create,publish and share ad-hoc reports. All surveys are generated for remote and are

customizable,and different from user to user. Developed for

(http://www.heineken.com/it/AgeGateway.aspx )

• Trasporto pazienti : Real-time multiuser application for the patient transport in hospitals.

The Patient trasport is controlled by a server-central. The central know by the background

syncronization system (a sort of icmp-ping) which users are online and where are localized in the

hospital in order to manage the transport as soon as possible.The apk as also a network quality

evaluator, in order to know when the user are online (it estimate a queue of signal in two-three

seconds). The application is based on the new Anrodid 4 os, and it uses the google notify system to

communicate with the devices. This application are currently used in 6 hospitals in the north of Italy

and currently i’ve put the multilingual support in order to sell it in other countries.

• Igiene: Rest-full multiuser geolocalized application (Android 3.x) for work managment, with

built-in syncronization task (online-offline features),download Attachment (.pdf,.work, .jpg),

build-in printing documents (the already server recorderd orders could be directly saved in

.pdf locally and printed on air by printershare apk), with concurrency managing. This

application is currently used in the north of italy by 200 user every day to make-print and send

orders. Developed for (http://www.manutencoopfm.it/eng/index.asp).

• eVO: Rest-full multiuser geolocalized application (Android 2.x) for managing shop orders,

electronic vouchers,shop order history,currently is used in all Italy to aroud 500 users every

day and around 1000 shops owned by Manutencoop.

(http://www.manutencoopfm.it/eng/index.asp).It’s possible to use eVO apk online and offline.

We have build a private sync-replicator mechanis for updating local sql-lite datas. The user

could be offline, make orders and when he will come back at office he will be able to

syncronize new datas, updating new vouchers and manage new orders.

October 2011-February 2012 http://ema.europa.eu/ema/

I worked in Unified Communication Center. I used and administrated software for virtual

meeting as adobe connect and vitero meeting. Securing the network, and manage the

adding and delete user process. I analized some processes for report creating to

automate with bash scripting in the server site. I organized the administrated all virtual

meeting with the support of my team.

May 2007-September 2009 http://www.fisica.uniud.it

I was system and datacenter admin, responsible for the quality and the security of the

network. C/Java, and python programmer for some affiliates. I’ve followed all the virtualization process

(Vmware) from old os (UnixV,Sun5.x,DigialUnix) to new ones (OpenBSD). I’ve administrated

services like Apache,Ftp,Mail Daemons, and dbs like Oracle,MySql

November 2006-May 2007 http://www.emaze.net/en/

I worked in R&D/tiger team sector reserching and developing (C/Obj-c + bash scripting) on OS X ppc

and i386 platform, i have also coded some information gathering plug-ins for the private vulnerability

framework using Python script language.

May 2006-November 2006 http://www.e-moz.it

I projected the software for an atm terminal to manage a resturant credit card system and electronic

voucher. I worked with SLE 4442 chip cards and a linux atm based (2.x). I coded arm assembly, C,

C+ in kernel space and in user land. The application is already in production with around 200 users, but

the company is closed.

Personal Projects:

Advertise-me

Tech: Android/html5

This is a platform for company advertising will be released on January 2014.

Conferences Attended:

Aug 2013 Hack-aton startup event,Roncade,Treviso (http://www.h-farmventures.com)

Oct 2013 Hackmeeting italy,Cosenza

Blogs:

• http://strangedevexperience.blogspot.it/

Other:

I’m semi-professional volley player since I was 14. I also love music and I play piano since I was 8 and

guitar (just some chords)