Paolo Costanzo paolocostanzo

`> cat /proc/paolo/status`

class PaoloCostanzo:
    role        = "Chief Endgame Officer @ CoDe RTD"
    aka         = ["nonèCostanzo", "the guy who debugs criminal orgs on Easter"]
    location    = "🇮🇹 Italy — 🌐 Remote Worldwide"
    orcid       = "0009-0005-7205-5945"
    company     = "CoDe - Research & Technological Development"
    focus       = ["Cloud & AI Product Security", "Agentic AI / LLM / MCP",
                   "Offensive Validation", "Threat Intelligence", "OSINT"]
    research    = "Outside the Prompt — trust boundaries of AI coding agents & MCP"
    cloud       = ["AWS (Academy Educator)", "Azure", "IAM & identity", "IaC / GitOps"]
    teaching    = ["ITS ICT Piemonte", "Forte Chance ETS"]
    mentoring   = ["Startup Geeks", "SecurityCert — Board of Advisors"]
    languages   = ["Python", "Bash", "JavaScript", "Go", "C/C++"]
    speaks      = {"it": "Native", "en": "C1", "fr": "enough to order croissants"}
    side_quests = ["Scuba Diving Instructor (CMAS/NADD/DAN)", "trained with ex-Navy GOI operator"]
    fun_fact    = "spent Easter 2026 infiltrating Telegram crypto-drainer channels instead of eating colomba"
    now_playing = "Outside the Prompt — from blog series to journal paper, data in the open"
    philosophy  = "I am always doing that which I cannot do, in order that I may learn how to do it."

`> systemctl status paolo.service`

● paolo.service — Chief Endgame Officer
   Loaded: loaded (/etc/systemd/system/paolo.service; enabled)
   Active: active (running) since Aug 2020
   Tasks:  4 (limit: ∞)    Memory: caffeinated

   ├─ PID 1  [CoDe RTD] Co-Founder & CEO — since Aug 2020
   │    ├─ AI-powered SaaS: digital content & identity protection
   │    ├─ Multi-region AWS infra (encrypted, scalable, GDPR-compliant)
   │    ├─ AI-driven abuse detection at scale: accounts, copyright, piracy
   │    ├─ META tech partner — anti-piracy enforcement on social platforms
   │    ├─ €1M raised · 50+ customers across Europe
   │    └─ E2E encryption · granular IAM · secure cloud governance
   │
   ├─ PID 2  [Lecturer] Cybersecurity & AWS — teaching since Sep 2020
   │    ├─ ITS ICT Piemonte → course lead: Cyber Security Specialist · SOC Analyst ·
   │    │    AWS Cloud Architect — since Mar 2026
   │    ├─ AWS → architecture, Well-Architected, IaC (CloudFormation/CDK/Terraform)
   │    ├─ Forte Chance ETS → networking, Cisco labs, threat mgmt — since Jul 2025
   │    ├─ Istituti Galilei → systems, networks, telecom — Sep 2020 → 2025 (closed)
   │    └─ Methodology: recon → enum → exploit → report (yes, even in class)
   │
   ├─ PID 3  [Researcher] Cloud & AI Security · Threat Intel
   │    ├─ Outside the Prompt — AI coding agents & MCP trust boundaries
   │    │    (open lab + preregistration, DOI) — Sep 2026 → now
   │    ├─ CTF writeups — 15 rooms, methodology over flags — Jul–Aug 2026
   │    ├─ MCP spec conformance: an executable test for a MUST NOT (13/13) — Jul 2026
   │    ├─ Crypto-drainer DaaS: $13,960 traced, Telegram infra infiltrated — Apr 2026
   │    ├─ Iranian APT campaign — found what Unit 42 & CloudSEK missed — Mar 2026
   │    └─ "I take things apart and watch what moves at the edges"
   │
   └─ PID 4  [Side Quest] Scuba Diving Instructor
        ├─ CMAS / NADD / DAN — diving since 2006, instructor since 2018
        ├─ Trained with ex-GOI (Italian Navy Special Forces) operator
        └─ Because sometimes the real vulns are 30 meters deep

`> cat /var/log/achievements.log`

Year	Entry
🧪 2026	Outside the Prompt — open lab harness + preregistration, both with Zenodo DOI
🏅 2026	Global 100 Winner — GPMG, Best Data Security Software Products Business of the Year (CoDe)
🏅 2026	The Strategist Winner — GPMG (CoDe)
🎓 2026	AWS Academy Educator — certified to teach AWS cloud technologies
📄 2026	2 Preprints (Zenodo DOI) — TRON Drainer-as-a-Service (Apr) + Operation Epic Fury (Mar)
🎓 2025	Cisco Networking Academy Instructor — teaching Cisco networking & security labs
🏅 2022	Up2Stars — Intesa Sanpaolo, winner (innovative startups programme)
🥇 2022	1st Place AI Week — best Italian AI project (CoDe)
📜 2018–2021	3 Patent filings (Italy) — video watermark embedding & extraction (Dec 2019, Apr 2021) + watermarked video distribution system (Apr 2018)
🏅 2018	Digithon Finalist — CoDe project

`> history | grep -v current`

2022-2024  Presidenza del Consiglio    "Gaming & digital skills" WG    MiC · MIM
2022-2024  Gold Fox Gaming S.p.A       CSO & CTO                       [EXIT]
2020-2024  Digital360                  Cyber security author           200+ pros network
2020-2023  Digital Innovation Days     Head of Technology & Content    2k attendees
2020-2021  Social Innovation Teams     Program Analyst                 PoliTo·UniTo·PoliMi
2017-2020  tillate.world (Zurich)      Co-Founder & COO                [EXIT]

`> cat /etc/research/publications.bib`

Now — Outside the Prompt (Sep 2026 →): a series on the trust boundaries of AI coding agents (configuration, startup, tool metadata), headed for a journal submission.

Part 2 — Trusting a repo now means trusting its MCP servers (13 Oct 2026) — same repository, same harmless MCP server, eight AI coding agents, repeated measurements.
Lab harness — repository, reproducible and with harmless canaries (v0.2.1, 13 Oct 2026) · DOI 10.5281/zenodo.23300292
Preregistration — frozen before the remaining measurements (11 Oct 2026) · DOI 10.5281/zenodo.23300369
Part 1 — What this summer's AI agent vulnerabilities have in common (29 Sep 2026) — ten disclosures classified by where they trigger. In six, the model never had to be fooled.

Preprints

Anatomy of a TRON Wallet Drainer-as-a-Service (Apr 2026) — affiliate-based cryptocurrency theft operations on the TRON network. $13,960 in documented stolen funds, Telegram infrastructure infiltrated, takedown and law-enforcement report in progress. · DOI 10.5281/zenodo.19535888
Operation Epic Fury: What the Reports Missed (Mar 2026) — independent OSINT analysis of the Iranian dual-platform cyber campaign targeting Israeli civilians. Undisclosed Windows payload, secondary C2 at 0/94 on VirusTotal, infrastructure active 8 months before anyone noticed. · DOI 10.5281/zenodo.19227143

Reproducible labs — methodology, stated limits and runnable material:

MCP 2026-07-28: stateless does not mean state-free (Jul 2026) — executable conformance test for a spec MUST NOT. Three key strategies compared, 13/13 tests. The composite key the spec recommends is bypassable when the principal id contains the delimiter.
SSRF → IMDSv1 (Mar 2026) — from application SSRF to temporary IAM role credentials, on owned infrastructure. Verifiable mitigations: IMDSv2, hop limit, least-privilege role policy.
Prompt injection on enterprise LLMs (Mar 2026) — input → context → tool call chain, privilege separation, tool-level authorization, output validation and invocation logging.

📚 Everything with a permanent identifier → Publications · ORCID · Google Scholar · Zenodo · ResearchGate

`> ./ctf --list`

Writeups as reproducible runbooks, not flag dumps. Flags are always redacted: the method is the point, the value isn't.

🏨 Byte Lotus Hotel (TryHackMe Hacker Holidays, 25 Jul – 9 Aug 2026) — Day 0 to Day 14, one room a day across OSINT, web, cloud, forensics and boot2root.

`> ls -la /opt/arsenal/`

Offensive Security

Cloud & Infrastructure

Languages & Scripting

AI & Threat Detection

`> cat /etc/certs/verified.lst`

2026

Cloud & AI

Offensive · Detection · Network

📋 Full credentials → Credly

`> tail -f /var/log/github.log`

`> gl /var/log/3d-contributions.log`

Generated daily via GitHub Actions — yoshi389111/github-profile-3d-contrib

`> cat /dev/snake`

`> cat /var/www/blog/recent.log`

📖 Read all posts → paolocostanzo.github.io

`> cat /etc/motd`

┌──────────────────────────────────────────────────────────────────────┐
│                                                                      │
│   💼  Security consulting & architecture reviews                     │
│   🔐  Penetration testing & assessment (remote worldwide)            │
│   🎓  Cybersecurity education & mentoring                            │
│   🤝  If you build it, I'll try to break it                          │
│       (with a report and remediation, not just vibes)                │
│                                                                      │
│   📧  me@paolocostanzo.com                                           │
│   🌐  paolocostanzo.com  ·  paolocostanzo.github.io                  │
│                                                                      │
│   // I also accept bug reports on my own infra.                      │
│   // Find something? Tell me. Coffee's on me. ☕                     │
│                                                                      │
└──────────────────────────────────────────────────────────────────────┘

"I am always doing that which I cannot do, in order that I may learn how to do it."

root@costanzo:~# CEO who codes · Lecturer who pentests · Researcher who ships · Diver who debugs

Navigation Menu