OFFENSIVE SECURITY RESEARCHER

JUAREZ SEC

Offensive Security Researcher & Automation Developer.

Building security tooling, researching vulnerabilities and developing modern technical platforms with a focus on real-world findings.

LinuxReverse EngineeringOffensive SecAutomationResearch
ContactWriteups
WHAT I DO

Investigación ofensiva y desarrollo de tooling para bug hunters, pentesters y equipos Red Team.

Análisis de firmware y malware en entornos Linux/embedded con resultados reproducibles y reporte técnico.

Publicación de hallazgos, CVE research y metodologías de disclosure coordinado para sistemas críticos.

Automatización de procesos, hacking de API/infraestructura y seguridad industrial con enfoque práctico.

about

Technical depth, real results.

Offensive security research with a practical, report-driven approach. Founder of DevSecurityMX and research contributor at PipopeLabs.

11 CVE
1818 HTB Machines
3232 Challenges
3+3+ Projects
SERVICES_

Six focused engagement areas for offensive security, automation and secure platform development.

01
▣

Offensive Security

Pentesting web, API security y surface analysis. OWASP Top 10 y CVSS scoring.

Burp SuiteSQLMapNuclei
02
▣

Reverse Engineering

Binary analysis, firmware research y deobfuscation con documentación técnica completa.

GhidraRadare2IDA Free
03
▣

Malware Analysis

Static & dynamic analysis, threat research y reportes de comportamiento.

GhidraVolatilityCutter
04
▣

Security Automation

Scripts, pipelines y recon automation para equipos de seguridad y operaciones.

PythonBashNuclei
05
▣

Secure Development

Secure architecture, code review y Linux hardening con enfoque de diseño seguro.

OWASPSASTLinux
06
▣

IA Ofensiva

PENTIA — Red Team AI assistant local, sin filtros y sin telemetría.

PENTIAOllamaPython

Every engagement includes a full technical report with executive summary, CVSS scoring, findings and remediation recommendations.

Contact
PROJECTS_

Real work. Documented. Deployed.

01

CVE-2025-47812

GitHub ↗

CVE · Vulnerability Research

Vulnerabilidad real investigada y publicada con PoC funcional. Coordinated disclosure completa.

CVSS: 8.1HIGHPublishedCoordinated Disclosure
02

PENTIA

GitHub ↗

IA Ofensiva · Python · Ollama

Red Team AI assistant local. Sin filtros, sin telemetría, TUI con memoria persistente.

PythonOllamaTUIActive
03

HackRadarMX

Demo ↗GitHub ↗

Plataforma · TypeScript · Next.js

Centraliza CTFs, hackathones y eventos de ciberseguridad en México.

Next.jsTypeScriptLive
04

ESP32 Analysis Tool

GitHub ↗Docs ↗

Hardware Security · Python · Firmware

Herramienta forense para firmware ESP32/ESP8266 con automatización de análisis.

PythonFirmwarePublished
LAB_

juarezsec.dev/lab — incident reports, threat intelligence y research notes.

[CRITICAL]2025-05-01

CVE-2025-47812

Vulnerability Research

Affected: target system

CVSS: 8.1 (HIGH)

Discovery → PoC → Disclosure.

Attack vector: Network · Complexity: Low · Privileges: None.

AFFECTED SYSTEMCVSS SCORE 8.1STATUS PublishedATTACK VECTOR Network
Ver reporte completo →PoC en GitHub →
[RESEARCH]2025-03-15

ESP32 Firmware Analysis

Hardware Security

Target: ESP32 / ESP8266 microcontrollers

Tools: Python · Ghidra · binwalk · esptool

Automated forensic analysis for embedded firmware.

Methodology reproducible and documented.

TARGET ESP32TOOLS PythonSTATUS Tool publishedMETHOD Reproducible
GitHub →Docs →
[TOOL]2025-02-01

PENTIA — Offensive AI Assistant

Security Automation

Stack: Python · Ollama · TUI

No filters · No telemetry · Red Team mode.

Local assistant for offensive operations.

Session memory and command-driven workflow.

STACK PythonFEATURES No telemetryMODE Red TeamSTATUS Active
GitHub →
⚠ Todos los reportes siguen responsible disclosure.La información sensible se redacta o anonimiza. Los hallazgos son reales y documentados.
RESEARCH COLLECTIVE_

PipopeLabs — offensive research and tooling independent from juarezsec.

Independent research collective focused on offensive security, reverse engineering and experimental tooling. Research published with technical depth and reproducible methodology.

Explore Research →
pipopelabs @pipopelabs
Firmware Research
Reverse Engineering
Security Tooling
Embedded Analysis
Vulnerability Research
Linux Research
TRAINING & PLATFORMS_

Compact training record and active lab profiles supporting the research portfolio.

Introduction to CybersecurityCisco NetAcad2024
CCNA — Introduction to NetworksCisco NetAcad2024
Junior Cybersecurity AnalystCisco NetAcad2024
Linux UnhatchedNDG2024
Claude AI 101Anthropic2025
Hack The Box

Active Researcher · 18 Machines · 32 Challenges

Ver perfil →
DEVSECURITYMX_

Offensive security research team · Puebla, México

Equipo independiente de investigadores en seguridad ofensiva. Red Team · Pentesting · Reverse Engineering · Malware Analysis · Security Automation.

devsecuritymx.com →
CONTACT_

Let's work together.

¿Tienes un reto? Disponible para pentesting, auditorías, malware analysis e investigación ofensiva.

Send Message →