soufiane Ouha
Principal Security Consultant
google
Soufiane is a is a seasoned Offensive Security Consultant with over 15 years of experience in penetration testing and red teaming. He specializes in mobile application security, with deep expertise across both Android and iOS ecosystems.
Throughout his career, he has conducted comprehensive security assessments for global enterprises, uncovering critical vulnerabilities and helping organizations strengthen their mobile security posture. His work spans across static and dynamic analysis, reverse engineering, and exploiting complex application logic flaws.
Speaker sessions
Briefings and Arsenals | Confirmed Speakers | No Session Assigned
Placeholder session for confirmed speakers without an assigned session, allowing them to be pushed to Swapcard and Visit.
- 07:30
- Tue
- 01 Dec
Stage:
Briefing Stage 2
Sessions Type:
Keynote
payable upon signing this Agreement, within 30 days of receipt of a valid invoice
A year ago on this stage, we answered a fundamental question: Can LLMs truly hack, or are they merely overhyped assistants? Since then, frontier models, agentic frameworks, and integration protocols have evolved rapidly. But when stripped of the overhype and applied against real-world mobile applications, complex APIs, and modern web architectures, how much has empirical offensive capability actually improved?In this session, we move beyond generic prompt engineering to dissect the architectural mechanics that dictate whether an AI offensive system succeeds or fails under real world conditions, not curated demos. Through real examples and hard lessons from a year of building, breaking, and rebuilding, we'll cut through the hype and show security professionals exactly how to integrate LLMs into their own offensive workflows, and how to build tooling like ours.Whether you're a red teamer, security researcher, or just curious about AI in offensive security, this talk will give you actionable insights, practical techniques, and a real, tested answer to how far AI powered pentesting has actually come.
- 15:40
- Tue
- 01 Dec
Stage:
Briefing Stage 1
Sessions Type:
Keynote