tomato thinking
$ cat about.md

About

I'm Tomás Matos, a cybersecurity graduate from the University of Aveiro, Portugal, passionate about understanding systems from the network level down to the binary, with a special interest in reverse engineering, malware analysis, binary exploitation, web security, and applied cryptography.

During my two years in the Cybersecurity Master's program, I developed a strong foundation in offensive security by competing in CTFs and solving hands-on challenges on platforms like picoCTF to build practical exploitation skills. At the same time, I explored defensive security and architecture design, focusing on threat modeling and secure solution engineering, as demonstrated in my Master's thesis using a Trusted Execution Environment (TEE) to anchor a secure application.

I also hold a Bachelor's degree in Software Engineering from the University of Aveiro. Building a strong foundation in computer science, networking, software development, and testing. It was what initially sparked my passion for cybersecurity!

  • MSc CybersecurityUniversity of Aveiro, 2026
  • CBFRPro CertifiedBinary Fuzzing & Reversing
  • C · Python · Java · AssemblyCore Languages
  • Open to OpportunitiesPreferably in Portugal / Remote
$ ls skills/

Skills

Reverse Engineering

  • Static & dynamic binary analysis
  • Multi-architecture disassembly
  • Malware
  • Android
  • Emulation-driven analysis

Binary Exploitation

  • Stack overflows & ROP chains
  • Heap Use After Free
  • Memory leakages

Applied Cryptography

  • Symmetric: AES (GCM / CBC)
  • Asymmetric: RSA, ECC, Diffie-Hellman
  • Hash Functions & MACs
  • Post-Quantum: Lattice-based

Trusted Execution Environments

  • SGX, Enclave development (EDL/ECALL)
  • Sealed storage & migration
  • Quote verification

Interests

  • Hiking & Running
  • Music, Clarinet
  • Low-level systems
  • CTF culture
$ which tools

Tools

Reverse Engineering

  • Ghidra
  • IDA Pro
  • GDB
  • Unicorn Engine
  • objdump
  • AFL++
  • Jadx
  • Frida

Exploitation

  • pwntools
  • ROPgadget

Crypto

  • Intel SGX SDK
  • OpenSSL
  • PyCryptodome
  • Hashcat
  • RsaCracker

Languages

  • C / C++
  • Python
  • Java
  • Bash
  • Assembly

Forensics / Web

  • Wireshark
  • binwalk
  • Burp Suite
  • CyberChef
  • Nmap
  • SQLMap
$ tail -f experience.log

Experience

Researcher IEETA · University of Aveiro 2025 – 2026
  • Research and development of a mobile application and smart contract system on the Polygon L2 blockchain, focused on digitalising Bills of Lading (BoL).
  • Designed and implemented mechanisms for secure BoL registration, validation, ownership transfer, and peer-to-peer sharing using blockchain stored data and smart contracts.
Board Member & CTF Player NUAC - University of Aveiro Cybersecurity 2025 - Ongoing
  • Organized hands-on cybersecurity workshops covering web security, and reverse engineering for university students.
  • Authored custom challenges (Crypto & OSINT & Reverse) for internal and public CTF competitions organized by NUAC.
  • Competed as an active member of the NUAC CTF team in national and international Capture The Flag competitions.
$ cat education.txt

Education

MSc in Cybersecurity

University of Aveiro · DETI

2024 – 2026

  • Applied Cryptography: ECC, DH, RSA, Post-Quantum Lattice-Based Schemes
  • Infrastructure & Network Security: Network Security Protocols, Perimeter Defense, Security Planning & Architecture, SIEM Deployment
  • Identity & Access Management: Authentication/Authorization Mechanisms, FIDO2, X.509, PKI
  • Offensive & Defensive Security: Vulnerability Analysis, Reverse Engineering

BSc in Informatics / Computer Engineering

University of Aveiro

2021 – 2024

  • Covered OOP, web programming, distributed systems, relational and non-relational databases, networks, machine learning, software design patterns, and full-stack development.
$ ls certs/

Certificates

CBFRPro ↗

Certified Binary Fuzzing & Reversing Professional

The SecOps Group · Jul 2026 · #11682249

Hands-on fuzzing methodology, AFL++ instrumentation, persistent-mode harnesses, crash triage, and binary reversing.

API Security Fundamentals ↗

API Security Certification

APIsec University

Hands-on REST API security analysis, vulnerability identification, OWASP API Top 10 mitigation, and secure design practices.

Cambridge English ↗

English Language Proficiency

Cambridge Assessment English

Certified English language proficiency qualification demonstrating advanced communication skills in professional environments.

$ ./run_ctf.sh

CTF Competitions

CTFs are where I sharpen my practical edge, mostly focused on reverse engineering, pwn, cryptography, and binary analysis.

SALT CTF Event

SALT CTF

Organizer & Challenge Author

NUAC Team · May 2026

HACKDAY.FR Finals

HACKDAY.FR Finals

13th place

ESIEE · Paris, France · 2025

BSides Porto CTF

BSides Porto

5th place

ISEP · Porto, Portugal · 2025

ACM & xSTF CTF

ACM & xSTF

3rd place 🥉

FEUP · Porto, Portugal · 2025

$ ls publications/

Publications

$ ./contact.sh

Contact

Open to security roles and interesting collaborations.

Best way to reach me: