Rules of engagement, classified: (click to declassify)

cat stats.log

6+years on Linux
120+CTF challenges solved
15valid bug reports
40+lab machines rooted
25public write-ups

ls ./projects

bug-bounty-reports

MEDFound and reported valid vulnerabilities through HackerOne and Bugcrowd programs. Stayed inside each program's scope and waited for the fix before sharing details.

hackerone · bugcrowd · responsible disclosure

authorized-webapp-pentest

CRITFull pentest of a deliberately vulnerable app against the OWASP Top 10. Wrote a client-style report with proof of concept, risk rating and fixes.

burp · sqlmap · owasp

home-hacking-lab

INFOIsolated lab with Kali and vulnerable VMs on a private network. Practiced recon, exploitation and privilege escalation only on machines I own.

kali · virtualbox · metasploitable

ctf-writeups

MEDWeb, cryptography and forensics challenges from Hack The Box and TryHackMe, explained step by step so others can learn.

htb · tryhackme

active-directory-lab

CRITBuilt a small AD domain and practiced Kerberoasting, pass-the-hash and privilege escalation, then wrote the detections and hardening steps for each.

bloodhound · impacket · windows server

wifi-security-audit

MEDAudited my own home network: WPA2 handshake capture, weak passphrase testing and router hardening checklist.

aircrack-ng · wireshark

phishing-awareness-campaign

INFORan an approved phishing simulation for a student club and trained members to spot and report suspicious emails.

gophish · awareness training

secure-code-review

MEDReviewed open source Python and PHP projects for injection and auth flaws, then sent fixes to the maintainers as pull requests.

semgrep · bandit · github

github | linkedin | blog

cat code_of_ethics.txt

cat skills.conf

linux_sysadmin
bash_scripting
web_pentest
network_sec
recon_osint
report_writing
python_bash
active_directory
reverse_eng

git log --oneline

ls ~/github/tools

Open source tools I learned and use. Click any to open its GitHub repo.

Recon and OSINT

subfinderhttpxAmasstheHarvesterSpiderFootSherlockNmapMasscanRustScan

Web testing

NucleiffufferoxbustersqlmapOWASP ZAPNiktoWPScan

Exploitation and post-exploitation

MetasploitImpacketNetExecBloodHoundResponderPEASS-ng (linPEAS)pspyChiselLigolo-ngBettercap

Passwords and wireless

HashcatJohn the RipperHydraAircrack-ng

Blue team and forensics

WazuhSuricataZeekVolatility 3YARASigmaVelociraptorCyberChef

Reverse engineering and binary

Ghidraradare2pwntools

Code and secrets scanning

SemgrepBanditTrivyTruffleHogGitleaks

Wordlists and payloads

SecListsPayloadsAllTheThings

cat certs.txt

./contact --open

Open to authorized penetration tests, bug bounty collaboration, red team internships and junior security roles.

send_message