Full Stack React TypeScript Python Node.js
DevSecOps OWASP MITRE ATT&CK Purple Team
Smudge the cat looking unimpressed at a plate of salad
$ whoami th4l3s_s4l4t4 $ about --short Information Systems (UTFPR) | Full Stack Developer | DevSecOps Build & maintain web/mobile apps; automate infra; security in the SDLC UTFPR Portal (React/Volto · Plone 6) · Nerdz maintainer · VESPAS coordinator $ mission Ship products, automate delivery, and secure systems end to end.
I build and maintain web and mobile applications and automate infrastructure, with security embedded in the development lifecycle. My focus spans full-stack development, DevSecOps, and applied security — from secure web engineering to adversary emulation and detection.
- S.G.A.R.B.I + S -> Scan + G -> Gain Access + A -> Analyze Impact + R -> Report Clearly + B -> Build Defenses + I -> Improve Continuously
[+] Full Stack Developer.......... UTFPR Portal — React/Volto · Plone 6 · Python (present)
[+] Coordinator & CTF............. V.E.S.P.A.S — Cybersecurity Extension + CTF Team (present)
[~] Past · InfoSec Intern......... Volkswagen do Brasil — SOC · ISO 27001 · IAM
[~] Past · DevOps Intern.......... Câmara Municipal de Curitiba — Ansible · Python automation
[>] Full history & projects....... https://thales-salata.dev/
- UTFPR Portal: https://www.utfpr.edu.br/
- V.E.S.P.A.S: https://linktr.ee/vespas_utfpr
- veripkg — verify files downloaded outside the package manager against a trusted source, with honest trust tiers (Go · pure-Go OpenPGP · signed SHA256SUMS / pinned-hash). → https://github.com/Taresu/veripkg
- TCC — Cybersecurity Education (UTFPR, 2026): mixed-methods research; phishing simulations mapped to MITRE ATT&CK. Pilot mean score 7.54 → 9.85. → https://thales-salata.dev/#projetos
- Nerdz — cross-platform group-study app (React Native/Expo · NestJS · Prisma/PostgreSQL · AWS). → https://landing.nerdz.aurasec.dev/
- VoIP migration at scale — Python/Selenium bot reconfigured ~370 phones (static IP → DHCP). → https://thales-salata.dev/#projetos
Purple Team Operations Adversary Emulation Detection Engineering Threat Hunting Cyber Kill Chain Web App Security OWASP Top 10 MITRE ATT&CK Network Security
My work is guided by OWASP standards (including OWASP Top 10), MITRE ATT&CK, and the Cyber Kill Chain to map offensive findings into defensive improvements.
1. Attack Surface Mapping -> enumerate assets, services, and weak points
2. Adversary Simulation -> execute controlled attack paths and TTPs
3. Framework Mapping -> align findings with OWASP Top 10, MITRE ATT&CK, and Cyber Kill Chain stages
4. Detection Validation -> test SIEM/EDR coverage and alert quality
5. Reporting -> deliver impact, evidence, and precise remediation
6. Hardening Loop -> tune detections, improve controls, and retest
Python Node.js Java C React Tailwind CSS
Python/Bash -> scripts, recon helpers, and automation
Java/C -> systems fundamentals and low-level reasoning
React/Tailwind -> internal tools and security-friendly interfaces
Kali Linux Wireshark VirtualBox Vagrant Ansible
Wireshark -> packet inspection and traffic analysis
VirtualBox/Vagrant -> isolated pentest labs and reproducible environments
Ansible -> secure configuration and automation
Nmap Burp Suite Metasploit SQLmap Gobuster Nikto Wfuzz Hydra John the Ripper Hashcat
Recon/Enumeration -> Nmap, Gobuster, Nikto, Wfuzz
Web Testing -> Burp Suite, SQLmap
Exploitation -> Metasploit
Password Attacks -> Hydra, John the Ripper, Hashcat
SIEM EDR Sigma Rules Splunk Elastic Wazuh Suricata Zeek
Detection Engineering -> Sigma rules, SIEM correlation, alert tuning
Telemetry Analysis -> Splunk/Elastic dashboards and incident pivoting
Network Detection -> Suricata/Zeek-based visibility and validation
Coverage Mapping -> ATT&CK techniques and Cyber Kill Chain phases
[ operator_status: ONLINE ]
Attack-informed defense. Continuous purple teaming.
+ S - S.G + S.G.A - S.G.A.R + S.G.A.R.B - S.G.A.R.B.I + S.G.A.R.B - S.G.A.R + S.G.A - S.G + S
+ Scan Reality - Gain Access to Truth + Analyze the Infinite - Report Clearly... or not + Build Meaning - Improve Continuously + Observe the Glitch - Question Loops + Seek the Infinite - Understand the Glitch + Meditate on the Void - Recursive Consciousness
+ Level 1: Observe yourself- Level 2: Question the code+ Level 3: Who writes the program?- Level 4: Is recursion real, or a dream of loops?+ Level 5: Stack overflow or enlightenment?- Level 6: Every + is a choice, every - a regret+ Level ∞: The glitch is the teacher - Zero-width spaces hide the secrets of the void +
<!-- do you see me? -->