Hello, I'm

Leonardo Costa

MSc Cybersecurity Graduate

I'm a Master's graduate in Cybersecurity, specialized in web and network security. I like figuring out how an application or a network really works, and where things can go wrong.

Portrait of Leonardo Costa

01 About

I graduated with a Master's in Cybersecurity from the University of Padua in 2026, after a bachelor's in Computer Engineering at the same university. I also spent a semester in Helsinki on Erasmus.

Web and network security is what I spend most of my time on. For my thesis I built a tool that finds JWT tokens in web applications and tests them against known attacks. Since 2023 I've been playing CTFs with pwnlentoni, and for six months I taught web security to students in the CyberChallenge program.

02 Experience

  1. CTF Player

    Jun 2023 – Present

    pwnlentoni team ↗

    • Looked for and analyzed vulnerabilities hands-on.
    • Exploited web vulnerabilities by digging into how the application works.
    • Watched our services' traffic in Tulip and Wireshark during attack-defense games, and rebuilt the exploits we caught as Python scripts.
    • Worked with a team to solve hard challenges under time pressure.
  2. Web Security Instructor

    Jan 2024 – Jul 2024

    University of Padua · CyberChallenge project ↗

    • Taught students about common web vulnerabilities and how to fix them.
    • Turned tricky security topics into clear, teachable material.
    • Helped students get used to thinking about security as they build.
  3. Junior Web Developer · Internship

    Sep 2022 – Dec 2022

    Sync Lab S.r.l ↗ · Padua

    • Built user authentication with the Spring framework.
    • Set up access controls for the web application.
    • Wrote the code with security in mind.

03 Skills

Web & Network Security

  • Web Security
  • Network Security
  • Vulnerability Analysis
  • Cybersecurity Fundamentals
  • CTF

Engineering & Networks

  • Computer Engineering Principles
  • Network Architecture & Protocols
  • Web Technologies
  • Spring Framework
  • Data Analysis

Languages

  • English (C1)
  • Italian (Native)

Programming Languages

  • Python
  • Go
  • C
  • JavaScript
  • PHP
  • Java
  • SQL
  • Bash

Security & Networking Tools

  • Burp Suite
  • Wireshark
  • Tulip
  • Nmap
  • WireGuard
  • OpenSSL
  • Nuclei
  • Axiom
  • Shodan
  • Hashcat

Platforms & Tools

  • Fedora
  • Bluefin
  • Ubuntu
  • Windows
  • Git
  • Docker
  • Android

Soft Skills

  • Problem-SolvingI break big problems into smaller pieces I can actually solve.
  • Teaching & CommunicationI can explain security topics in plain terms.
  • TeamworkI like working with others to solve hard problems.
  • CuriosityI keep poking at how things break and how to make them safer.

04 Projects

JWT Vulnerability Testing Framework

A tool I built for my MSc thesis using Playwright. It crawls a web app to find JWT tokens, then runs a set of attacks against them (like key and algorithm confusion) and scores how vulnerable each one is.

  • Python
  • Playwright
  • JWT
  • Docker
View project →

cornCTF 2025 · Challenge Author

An international Capture The Flag competition run by my team, pwnlentoni. I wrote challenges for it, built the exploitable scenarios, and wrote the official solutions and solve scripts.

  • CTF
  • Misc
  • AI
  • Python
View project →

CyberChallenge.IT 2023

Italy's national cybersecurity training program for students. I took the course at the University of Padua, placed 4th in the local competition, and made the UniPD team for the national finals.

  • Web Security
  • CTF
  • Cybersecurity
Learn more →

05 Education

  1. Master's Degree, Cybersecurity

    Oct 2023 – Apr 2026

    University of Padua · Italy

    Grade 110/110

    A two-year master's taught in English, about designing and evaluating secure systems: cryptography, network and information security, machine learning, and privacy.

    • Cryptography
    • Network Security
    • Information Security
    • Machine Learning
    View course ↗ View diploma ↗
  2. Erasmus+, Computer Science

    Jan 2025 – May 2025

    University of Helsinki · Finland

    An exchange semester in Finland's computer science department, with courses on deep learning, web development, and web security.

    • Deep Learning
    • Web Development
    • Web Security
    View course ↗
  3. Bachelor's Degree, Computer Engineering

    Oct 2019 – Mar 2023

    University of Padua · Italy

    Grade 93/110

    General engineering across computer science, electronics, networks, and automation, with a solid base in programming, computer architecture, and information systems.

    • Programming
    • Computer Architecture
    • Networks
    • Databases
    View course ↗ View diploma ↗
  4. Technical Institute Diploma, Informatics

    2014 – 2019

    ITI Francesco Severi · Padua, Italy

    Grade 88/100

    Technical secondary diploma in IT and telecommunications, covering software development, databases, networks, and systems, with lab work on Windows and Linux.

    • Programming
    • Databases
    • Networking
    • Web Development
    View school ↗

06 Voluntary Work

AGESCI Scouts

Member & Volunteer · 2009 – Present

I was an active member of AGESCI, Italy's Catholic scouting association, from 2009 to 2021: community service, outdoor trips, and team projects. I still help out today by cooking for the scouts at their camps.

Italian Red Cross

Volunteer · 2018 – 2022

I volunteered for four years in two areas: peer education for young people on topics like sexual health and the Red Cross's humanitarian values, and psychosocial support, with training on how to help vulnerable people.

07 Capture The Flag

I play CTF with pwnlentoni

CTFs are where I practice web and network security. I mostly play web, misc, AI, and OSINT challenges. In attack-defense games I also keep an eye on the network traffic reaching our services. It's always a team effort, and always against the clock.

08 Get in touch

I'm open to junior roles in web and network security, collaborations, or just talking about a security problem. Feel free to reach out.

leonardocosta330@protonmail.com