Hans-michael Varbaek

Senior Security Consultant at VarBITS

Copenhagen, Capital Region of Denmark
email-iconphone-icongithub-logolinkedin-logotwitter-logostackoverflow-logofacebook-logo
Join Prog.AI to see contacts
email-iconphone-icongithub-logolinkedin-logotwitter-logostackoverflow-logofacebook-logo
Join Prog.AI to see contacts

Summary

👤
Senior
🎓
Top School
Hans-michael Varbaek is a Senior Security Consultant with over a decade of hands-on experience in web application security, penetration testing, and vulnerability research, currently based in Copenhagen. He has presented advanced exploitation techniques at major conferences including multiple Black Hat Europe Arsenal talks and Kiwicon, and holds OSCE and OSCP certifications. His work spans red-team engagements, methodology development for large multi-country assessments, and improving report quality and reproducibility across teams. Hans-michael combines deep technical research—finding zero-days and moving XSS to RCE—with practical delivery, mentoring junior testers and standardizing testing approaches for consistent results. He has contributed to PenTest Magazine and participated in elite platforms like Synack and Cobalt, reflecting both community leadership and trusted commercial practice. An organizer of community events (Alt33C3) and an Arctic Code Vault contributor, he brings a mix of public research, operational security, and event-driven collaboration to every engagement.
code12 years of coding experience
job6 years of employment as a software developer
bookC (Scale: ECTS), IT-Administrator (System Administrator), C (Scale: ECTS), IT-Administrator (System Administrator) at Aarhus Business College
languagesEnglish, Danish
github-logo-circle

Github Skills (47)

rce10
xss10
redirector9
hacking9
gsm9
gnuradio8
linux8
security8
devops8
web-application7
jsp7
command-line7
php7
bsd7
cli7

Programming languages (7)

TypeScriptJavaC++JavaScriptGoPHPPython

Github contributions (5)

github-logo-circle
Varbaek/xsser

Nov 2015 - Feb 2020

From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017 + Extras
Contributions:1 release, 24 commits, 1 PR in 4 years 3 months
rcexssxss-exploitationxss-pocxss-injection
Varbaek/xss-shell-payloads

Jun 2014 - Nov 2015

Contributions:7 commits, 1 push in 1 year 5 months
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.
Request Free Trial