Alexander Hagenah

Cyber Security Leader

As a proven cyber security leader with over a decade of experience managing, leading, and executing technical and operational tasks across a variety of global growth sectors. My agile approach allows me to quickly adapt to business changes and deliver exceptional solutions.

I have an extensive background working with law enforcement and intelligence agencies in over 50 countries, where I have been instrumental in the development and evaluation of cyber security systems and solutions to address the growing criminal presence in the cyber security realm.

My strong communication skills and ability to connect with technical teams, sales teams, and C-level executives make me a sought-after presenter at conferences such as for Interpol, Europol, ISS World and others focusing on innovative and groundbreaking methods for conducting cyber investigations and combatting cyber crime.

Since 2021, I am working for SIX, where I am building an in-house offensive security team to stay ahead of criminal hackers. Furthermore in 2022, I joined the Technical Advisory Board of HackerOne, the world's leading hacker-powered security platform.

Professional Experience

05/2021 - Present

Head Cyber Controls / Offensive Cyber Security Lead

SIX Group AG

Zurich, Switzerland
07/2022 - Present

Technical Advisory Board

HackerOne

San Francisco, United States
04/2017 - 04/2021

Chief Technology & Innovation Officer

FinFisher

Munich, Germany
12/2009 - 04/2017

Senior Offensive Security Specialist

FinFisher

Dubai, United Arab Emirates
2007 - 2009

Senior Offensive Security Specialist

Confidential

Dubai, United Arab Emirates

Education

2022 - 2023

Executive Certificate, Cybersecurity Risk Management

Harvard University

Cambridge, MA, United States

Expertise

Key Skills

Information Security, Cyber Investigations, Penetration Testing & Social Engineering, Leadership & Management, Innovation, Information Security Governance, Complex Problem Solving, Lawful Interception, Information Risk Management & Compliance.

Public Speaking

Given a few dozen talks or consulted on several conferences such as for Interpol, Europol, ISS World and others. Topics varied and were about innovative and groundbreaking Cyber investigations methods.

Innovation

Identifies, prioritizes and successfully implements innovations with the greatest impact for meeting near- and longer-term business goals.

Leadership & Management

Sophisticated people skills and ability to deal with different cultures proven by successfully leading teams across several countries. Active curiosity, open-mindedness and sensitivity to different cultures.

Projects [1998 - 2005]

BitDefender for Mail Servers Malware Detection Bypass

Vulnerability in BitDefender for Mail Servers, which can be exploited by malware to bypass detection. The vulnerability is caused due to an error when parsing attachments and can be exploited via a specially crafted UUencoded mail with multiple attachments. Successful exploitation causes malware in an attachment to pass the scanning functionality undetected. The vulnerability has been reported in engine versions 1.6.1 and prior for Linux and FreeBSD.

zigstack

zigstack is for hardening the TCP/IP Stack (e.g. against DoS-Attacks) of Windows NT, 2000, XP, 2003-based workstations and servers.

xxpoof

Spoofed Packet Generator for Windows & DDoS network testing tool.

ipcshares

ipcshares can deactivate (or activate) the so-called IPC$-shares of WindowsNT, 2000 & XP computers. Those shares are enabled by default and can pose a security risk.

igmpflood

igmpflood is a simple tool for sending malformed IGMP packets to test the hardening of a target address.

RCON plaintext password exposure

RCON protocol is used to administrate your Half-Life/Counter- Strike Server. This advisory shows that it transmits the administrator password in plaintext over the wire.

CATCHiNG THE AiR STUFF (German)

A paper describing the basics, functionalities and security weaknesses in the IEEE 802.11 (WLAN) standard. Includes a CLI wifi scanner running on Linux/UNIX.

IIS anonymous lockout

Advisory on a default account used by the Microsoft IIS webserver for anonymous access which can be locked out. With this a website can be remotely shut down.

IIS ism.dll HTR truncation

Advisory affecting Microsoft IIS webserver 4/5 by calling ISM.DLL which allows appending a set of charaters to force the webserver to display the source code of the requested file.

HYPERLiNK-SPOOFiNG (German)

This document shows an attacking technique which allows to misuse secured connection like SSL.

SNiFFiNG FAQ (German)

This document describes how network sniffing works and how it can be (ab)used.

Contact

Email
ah@primepage.de
GPG Key [0x5CE016578890129E]

-----BEGIN PGP PUBLIC KEY BLOCK-----

xjMEYG3SUhYJKwYBBAHaRw8BAQdAORwy6FlbqiqiLwthwp3FTcGIjRXyZZx2y3vK+q8iSbnNI0Fs
ZXhhbmRlciBIYWdlbmFoIDxhaEBwcmltZXBhZ2UuZGU+wpEEExYIADkWIQQNMmvEBeNyVwLtmWZc
4BZXiJASngUCYG3SUgUJA8JnAAIbAwULCQgHAgYVCAkKCwIFFgIDAQAACgkQXOAWV4iQEp7UUAD/
WIPd5IedkV2MC2ZllJzkI8FKDmuqfQbuY2ACuF8RdNkA/jzj37WA4Y8jGlONPWwPyJpEencDK+7/
wfl3NU1zfSMLzjgEYG3SUhIKKwYBBAGXVQEFAQEHQG2wHZha918K6oKGsaq3y3Np9MBRJxYJOR/d
bfcf3tMuAwEIB8J+BBgWCAAmFiEEDTJrxAXjclcC7ZlmXOAWV4iQEp4FAmBt0lIFCQPCZwACGwwA
CgkQXOAWV4iQEp6L4QEAi3O+9s0cPUc+8eW4S8gQSbPZakqntPTDMxRHvGBO/uIBALB9rEbFvpz+
Pycuhw0+69rDINJaKZ/Obu07sH47CBUD
=YCOz
-----END PGP PUBLIC KEY BLOCK-----
© Resumex. All rights reserved | Design By: themehippo