My name is Maximilian Hildebrand aka m10x and I’m a penetration tester @ G DATA Advanced Analytics GmbH.

I’ve pursued a master’s degree in IT-Security @ Ruhr-Universität Bochum, with a focus on web, network and SSO security.

Interests

  • Web, SSO pentesting
  • API pentesting
  • Mobile pentesting
  • External pentesting
  • Internal pentesting, especially Active directory
  • Red Teaming

Certificates

  • Certified Red Team Operator (CRTO)
  • Offensive Security Certified Professional (OSCP)
  • eLearnSecurity Web Application Penetration Tester Extreme v2 (eWAPTXv2)
  • Practical Network Penetration Tester (PNPT)
  • eLearnSecurity Mobile Application Penetration Tester (eMAPT)
  • eLearnSecurity Junior Penetration Tester (eJPT)

CVEs

  • TOPqw Webportal (CVE-2024-45875, CVE-2024-45876, CVE-2024-45877, CVE-2024-45878, CVE-2024-45879)

Programming languages [I’ve use(d) the most and done projects with]

  • Go
  • Python
  • C#
  • Java

Hobbys

  • Selfhosting various services (utilizing Proxmox and Docker for Virtualization, Caddy as Reverse Proxy)
  • CTFs (HackTheBox)
  • Lockpicking (Green Belt)
  • Running, Cycling, Weightlifting