Cas Van Cooten
Founder at ABN AMRO Bank N.V.
Utrecht, Utrecht, Netherlands
Summary
🤩
Rockstar🎓
Top SchoolCas Van Cooten is an offensive security professional and founder with nine years of hands-on experience conducting advanced red team engagements and building tooling to validate defenses. He co-founded Offensys to help security teams continuously validate controls through realistic attack simulations, and concurrently leads complex engagements at ABN AMRO where he researches and develops new offensive techniques. Cas is a prolific open-source contributor focused on exploitation and tooling—his work includes a proof-of-concept Follina RCE replicator, lightweight C2 implants in Nim, and automation for bug bounty reconnaissance. With an academic background in Business Informatics from Utrecht University, he blends technical depth in payload development, AV/EDR evasion, and infrastructure automation with a pragmatic focus on improving defenders’ visibility. Not obviously, he repeatedly translates offensive research into reusable, production-ready tooling that both demonstrates risks and accelerates defensive improvements.
9 years of coding experience
2 years of employment as a software developer
Gymnasium/Technasium Voortgezet onderwijs, Gymnasium/Technasium Voortgezet onderwijs at Gerrit Rietveld CollegeMaster of Science (M.Sc.) Business Informatics, Master of Science (M.Sc.) Business Informatics at Utrecht University
English, Dutch
Github Skills (47)
data-generation10
shellcode10
nim-lang10
develop10
injection10
inject10
python10
vulnerability10
r10
bash10
nucleo10
generator10
command-injection10
n10
nuclio10
Programming languages (14)
Github contributions (5)
chvancooten/BugBountyScanner
Sep 2020 - Dec 2022
A Bash script and Docker image for Bug Bounty reconnaissance. Intended for headless use.
Role in this project:
Security Engineer & DevOps Engineer
Security Engineer & DevOps EngineerContributions:4 reviews, 105 commits, 47 PRs in 2 years 3 months
Contributions summary:Cas primarily contributes to a bug bounty reconnaissance tool. They implemented and refactored a Bash script (`BugBountyAutomator.sh`) to automate subdomain enumeration, live host checking, and vulnerability scanning using various tools. The user also added dependency checks and installation steps, implemented notification features, and integrated tools like Nuclei and GF. Furthermore, they have made contributions related to automating the scanning process.
bashdocker-imagebug-bounty-reconnaissancebugbountyreconnaissance
chvancooten/maldev-for-dummies
May 2022 - Jul 2022
A workshop about Malware Development
Role in this project:Security Engineer
Security EngineerContributions:18 commits, 5 PRs, 12 pushes in 2 months
Contributions summary:Cas primarily contributed to implementing malware development techniques, specifically focusing on shellcode injection and AV evasion strategies. They developed C# and Nim implementations for shellcode injection, incorporating dynamic targeting and EDR evasion techniques such as XOR encryption. The user's work demonstrates a strong understanding of low-level system interactions and techniques to bypass security measures.
malwaremalware-developmentworkshop
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.