Tim Wanli

R&D & Product Innovation | Offensive Security | Malware Dev | Rust, Zig, ASM

Germany

About

I operate at the intersection of Offensive Security, R&D, and Product Innovation. My focus extends beyond breaking systems; I identify critical market gaps to architect novel security solutions and offensive tooling that challenge modern infrastructure. I follow the principle that true innovation requires a deep understanding of failure modes—ranging from low-level kernel internals to enterprise-scale Active Directory environments. 🚀 R&D & Product Innovation Turning technical complexity into competitive advantage. I design and engineer advanced security products and offensive tooling, filling specific gaps in the market where standard solutions fail. Focus on custom C2 infrastructure, evasion frameworks, and high-performance security software written in Zig, Rust, and Go. ⚔️ Offensive Engineering & Evasion Specialized in low-level malware development and evasion research. I analyze EDR/XDR/AV detection logic to build robust artifacts. Currently aggressively deepening expertise in Rust and Assembly (x86/x64) to push the boundaries of memory-safe exploitation and custom loader development. 🏢 Infrastructure & Full-Stack Exploitation Beyond low-level development, I cover the full attack spectrum: - Active Directory: Mapping complex attack paths (Kerberos abuse, Forest Trusts, ACLs) in enterprise environments. - Web & Binary: Deconstructing web logic flaws and binary vulnerabilities to chain full-stack exploits. - Local Exploitation: Finding privilege escalation paths in Windows and Linux. 🔍 Vulnerability Research & Analysis Creator of the #! Anatomy of a Bug series. I publish deep-dive analyses of critical CVEs, deconstructing full kill chains to expose underlying logic flaws and drive safer architectural patterns covering the entire spectrum from web to kernel exploitation. 💻 Core Technology Stack Primary Engineering: Rust, Go, Zig, Assembly. Scripting & Automation: Python, Bash, PowerShell. Legacy/Audit: C, C++, Java/Kotlin, PHP, JavaScript. 🎓 Strategic Certification Roadmap I am currently executing a high-velocity certification path to benchmark my skills against the industry's toughest standards: Immediate: CPTS (HTB Certified Penetration Testing Specialist) & CAPE (HTB Certified Active Directory Pentesting Expert). Planned (2026): CWEE (HTB Certified Web Exploitation Expert), OSEP, OSED. Beyond: (ISC)² CCSP and OSEE. Continuous: MalDev Academy & Advanced Windows Internals. 🌐 Technical Dossier Explore my research on Kernel Exploitation, Malware Dev, and CTF Operations: https://tralsesec.github.io

Experience

  • CTF Player at Hack The Box
    Dec 2020 - Present · 5 yrs 7 mos

    https://app.hackthebox.com/public/users/475600

  • Open-Source Developer at GitHub
    Feb 2021 - Present · 5 yrs 5 mos

    https://github.com/tralsesec

  • CTF Player at TryHackMe
    Mar 2021 - Present · 5 yrs 4 mos

    https://tryhackme.com/p/Tralse

  • DevSecOps Engineer at Deutsche Telekom
    Sep 2025 - Feb 2026 · 6 mos

  • Intrusion Detection System Architect & Engineer at U-Glow
    Sep 2023 - Dec 2023 · 4 mos