Skip to main content
Danang Avan Maulana

Danang Avan Maulana

Adversarial Security Engineer
Punggawa Cybersecurity
Danang Avan Maulana (Avan) is an Adversarial Security Engineer at Punggawa Cybersecurity and an independent security researcher from Indonesia. His work spans penetration testing, vulnerability research, adversary emulation, red team operations, application security, and social engineering, with a focus on understanding how technical weaknesses and human behavior can be leveraged in real-world attack scenarios. Avan is also the founder of TegalSec, a cybersecurity community he has been building since 2018, where he contributes to security research and knowledge sharing. His work includes researching real-world attack surfaces, developing offensive security tools, and exploring practical approaches to adversarial security. His current research explores the intersection between technical exploitation and the human attack surface. He develops Pretexta, an open-source framework for structured social engineering assessments, and is the author of Hack The Human, a book exploring social engineering and human-focused attacks from an offensive security perspective.

Speaker sessions

Briefings and Arsenals | Confirmed Speakers | No Session Assigned

Placeholder session for confirmed speakers without an assigned session, allowing them to be pushed to Swapcard and Visit.

  • 07:30
  • Tue
  • 01 Dec
Stage: Briefing Stage 2
Sessions Type: Keynote

Pretexta: An Open-Source Framework for Social Engineering Assessments

Social engineering remains one of the most effective attack techniques because it targets human decision-making rather than technical vulnerabilities. Despite advances in security awareness programs, most organizations still rely on static phishing simulations that measure outcomes instead of understanding why people comply with attacker requests. Pretexta is an open-source laboratory designed to help security professionals build, execute, and analyze realistic social engineering simulations in a controlled environment. The platform enables researchers, penetration testers, red teams, and security awareness practitioners to create interactive scenarios that emulate modern social engineering techniques without targeting real individuals or organizations. During this Arsenal session, attendees will explore how Pretexta simplifies the entire assessment lifecycle from scenario creation and campaign management to participant interaction, behavioral analysis, and post-engagement reporting. The demonstration will showcase how adaptive conversations, reusable scenarios, and structured analytics can help organizations evaluate their resilience against human-centric attacks while maintaining strict ethical boundaries. Since its debut at DEF CON Singapore 2026, Pretexta has evolved into a modular platform featuring visual scenario management, campaign orchestration, extensible integrations, and collaborative workflows for security teams. Released under the MIT License, the project encourages community contributions and aims to establish a practical, open-source framework for advancing social engineering assessments.
  • 13:00
  • Tue
  • 01 Dec
Stage: Arsenal 4
Sessions Type: Keynote