Georgii Kumurzhi
About me
Information security specialist with over five years of experience in penetration testing and red teaming. I research web and mobile application security and conduct phishing simulations.
Lecturer in information security at MIREA — Russian Technological University, with over three years of teaching experience. Speaker at OFFZONE and Standoff Talks, and contributor of vulnerabilities to the FSTEC vulnerability database (2025-04223, 2025-04224, 2025-10638), and author of articles in Hacker magazine (Telegram App Phishing, Mobile Certificate, Watering hole attacks: injecting a JavaScript backdoor into Confluence).
On the @kgmnotes channel I share findings from my work. This site is a structured collection of information security notes.
Expertise
Awards
- Awillix Pentest Awards 2025 1st place: Evilginx2 and a Telegram bot (article)
- Awillix Pentest Awards 2025 3rd place: Accessing corporate web resources from the Internet as an arbitrary employee by exploiting a vulnerable API in a corporate mobile application (article)
Public talks
- OFFZONE 2026 — Where There's a Will, There's a Way: Bypassing Modern SWG Restrictions Without Holding Back (recording, slides, supplemental video)
- Standoff Talks 2025 — I Give You LoGiN, You Give Me Creds? Too Much? Or Why We Are Still Vulnerable to Citrix Bleed 2 (recording, slides)
- OFFZONE 2024 — One Watering Hole Attack to Rule Them All (recording, slides)
- OFFZONE 2023 — Using Flipper Zero in Red Team Engagements (recording, slides)
Contact
Ready to practise?
Explore a structured collection of practical information security notes and conference materials.
Explore notes