Dilanka Kaushal Hewage (r3vpwnx)
Senior red and purple team professional based in Dubai since 2019, with 8+ years of hands-on offensive security experience across regulated enterprise environments. Current scope covers internal vulnerability assessment and penetration testing (VAPT), authorized Red Team adversary emulation exercises, and static/dynamic application security testing (SAST/DAST) and secure code review for enterprise systems in a healthcare setting.
Independent vulnerability research: author of 32 published CVEs across open-source and commercial software, spanning OS command injection and memory-safety bugs in desktop applications and native libraries. I work the full cycle from source audit to a working proof of concept to coordinated disclosure.
AI, LLM, and offensive-security automation
I build and operate an LLM-driven offensive-security automation platform: autonomous agents wired to MCP tool servers, a RAG knowledge base over past engagements and research, and pipelines that drive source auditing, fuzzing, and reverse engineering at scale. I also apply red team methodology to AI systems themselves, testing LLM applications, agent and MCP tool integrations, and RAG pipelines for prompt injection, tool abuse, data exfiltration, and unsafe autonomy.
Red and purple team operations
Red and purple team experience includes planning and executing multi-day, authorized adversary emulation exercises covering initial access, lateral movement, credential access, and persistence techniques, in close purple team collaboration with detection engineering teams to validate and tune SIEM/EDR coverage. Findings are delivered as management-level reports for stakeholders and detection teams. Engagements are conducted under formal rules of engagement in compliance with ISO 27001 and OWASP standards, following the same threat-led testing principles underpinning frameworks such as TIBER-EU and DORA TLPT.
Technical scope spans on-premises and cloud environments (Azure, AWS, GCP), Active Directory security assessment, mobile application testing, and wireless network security assessment. Background also includes binary exploitation, reverse engineering, and malware analysis, supported by ongoing independent research and competitive CTF participation (HackTheBox Hall of Fame, TryHackMe top 1%).
Additional experience covers compliance-driven vulnerability management, remediation coordination with infrastructure and development teams, and audit documentation for regulatory reviews.
Writeups and advisories: r3vpwnx.space · Medium · GitHub
Certifications
- Certified Red Team Lead (CRTL / CRTO II)
- Certified Red Team Operator (CRTO)
- Certified Red Team Expert (CRTE)
- Certified Red Team Professional (CRTP)
- Certified Red Team Analyst (CRTA)
- Certified Active Directory Pentesting Expert (CAPE)
- OffSec Certified Professional Plus (OSCP+)
- OffSec Certified Expert (OSCE)
- Certified Reverse Engineer (eCRE)
- Certified Penetration Testing Specialist (CPTS)
- Certified Penetration Tester eXtreme (eCPTX)
- Lead Implementer, ISO/IEC 27001:2022
Trainings
- 2024 - HackerOps @ Ralph May, Antisyphon Training
- 2024 - Enterprise Attacker Emulation and C2 Implant Development @ Joff Thyer, Antisyphon Training
- 2024 - Active Defense & Cyber Deception @ John Strand, Antisyphon Training
- 2024 - Attack Emulation Tools: Atomic Red Team, CALDERA and More @ Carrie Roberts, Antisyphon Training
- 2024 - Advanced Offensive Tooling @ Chris Traynor, Antisyphon Training
- 2024 - Offensive Coding @ Mr.Un1k0d3r
- 2023 - Red Team & Operational Security @ Chetan Nayak, Dark Vortex
- 2023 - Offensive Tool Development @ Chetan Nayak, Dark Vortex
- 2023 - Malware on Steroids @ Chetan Nayak, Dark Vortex
- 2023 - SANS SEC565 – Red Team Operations and Adversary Emulation
- 2023 - White Knight Labs – Advanced Red Team Operations
- 2022 - Attacking and Defending Active Directory: Advanced Edition @ Nikhil Mittal
- 2022 - SANS SEC560 – Enterprise Penetration Testing
- 2022 - SANS SEC660 – Advanced Penetration Testing, Exploit Writing, and Ethical Hacking
- 2022 - SANS SEC760 – Advanced Exploit Development for Penetration Testing
- 2022 - Red Team Training @ Mr.Un1k0d3r
- 2021 - Creative Red Teaming @ Mandiant
- 2016 - Adversary Simulation and Red Team Tactics @ MDSec
