//PENTEST

Pentest & Security

Ethical hacking, penetration testing, and security audits finding and fixing vulnerabilities before attackers do. Here's how I approach offensive security engagements.

//02 METHODOLOGY

Pentest Engagement Flow

01

Reconnaissance

OSINT, passive & active enum

02

Scanning

Port scanning, service detection

03

Exploitation

Vuln exploitation, payloads

04

Post-Exploitation

Pivoting, persistence, data exfil

05

Reporting

CVSS scoring, remediation steps

attack chain -> report

Accelerated by AI assistants - opencode, Codex, Claude Code - and automation with n8n.

//03 CAPABILITIES

Areas of expertise

Web Application Pentesting

In-depth assessment of web apps following OWASP Top 10 and beyond.

  • SQL Injection, XSS, CSRF, IDOR
  • Authentication & session management flaws
  • API security testing (REST, GraphQL)
  • Business logic vulnerabilities
  • OWASP Top 10 & WSTG methodology

Network Pentesting

External and internal network assessments to identify attack paths and misconfigurations.

  • Port & service enumeration
  • Network protocol attacks
  • Firewall & ACL bypass techniques
  • Man-in-the-middle attacks
  • Active Directory enumeration

OSINT & Reconnaissance

Comprehensive open-source intelligence gathering to map the attack surface.

  • Subdomain & DNS enumeration
  • Employee & credential exposure
  • Shodan / Censys scanning
  • Google dorks & Wayback Machine
  • Social engineering vectors

Exploit Development

Custom exploit crafting and payload development when off-the-shelf tools fall short.

  • Custom Burp Suite extensions
  • Python / Bash exploit scripts
  • Payload obfuscation & evasion
  • CVE reproduction & PoC writing

Secure Code Review

Manual and automated source code analysis to find security flaws early.

  • Hardcoded secrets & credentials
  • Insecure deserialization
  • Improper input validation
  • Dependency vulnerability audit
  • SAST tooling integration

Vulnerability Assessment

Systematic identification and prioritization of vulnerabilities across web and network assets.

  • CVE research & analysis
  • CVSS scoring & risk rating
  • Remediation roadmap
  • Re-testing & validation

//04 ARSENAL

Tools & Environment

Web Pentesting

Burp Suite ProOWASP ZAPSQLMapNiktoGobuster

Network & Recon

NmapMasscanWiresharkNetcatShodan

Exploitation

MetasploitHydraJohn the RipperHashcatCrackMapExec

OSINT

theHarvesterMaltegoRecon-ngAmassSpiderFoot

Environment

Kali LinuxParrot OSDockerPythonBash