//PENTEST
Pentest & Security
Ethical hacking, penetration testing, and security audits finding and fixing vulnerabilities before attackers do. Here's how I approach offensive security engagements.
root{'@'}kali:~#
//02 METHODOLOGY
Pentest Engagement Flow
01
Reconnaissance
OSINT, passive & active enum
02
Scanning
Port scanning, service detection
03
Exploitation
Vuln exploitation, payloads
04
Post-Exploitation
Pivoting, persistence, data exfil
05
Reporting
CVSS scoring, remediation steps
Reconnaissance
OSINT, passive & active enum
Scanning
Port scanning, service detection
Exploitation
Vuln exploitation, payloads
Post-Exploitation
Pivoting, persistence, data exfil
Reporting
CVSS scoring, remediation steps
Accelerated by AI assistants - opencode, Codex, Claude Code - and automation with n8n.
//03 CAPABILITIES
Areas of expertise
Web Application Pentesting
In-depth assessment of web apps following OWASP Top 10 and beyond.
- ▸ SQL Injection, XSS, CSRF, IDOR
- ▸ Authentication & session management flaws
- ▸ API security testing (REST, GraphQL)
- ▸ Business logic vulnerabilities
- ▸ OWASP Top 10 & WSTG methodology
Network Pentesting
External and internal network assessments to identify attack paths and misconfigurations.
- ▸ Port & service enumeration
- ▸ Network protocol attacks
- ▸ Firewall & ACL bypass techniques
- ▸ Man-in-the-middle attacks
- ▸ Active Directory enumeration
OSINT & Reconnaissance
Comprehensive open-source intelligence gathering to map the attack surface.
- ▸ Subdomain & DNS enumeration
- ▸ Employee & credential exposure
- ▸ Shodan / Censys scanning
- ▸ Google dorks & Wayback Machine
- ▸ Social engineering vectors
Exploit Development
Custom exploit crafting and payload development when off-the-shelf tools fall short.
- ▸ Custom Burp Suite extensions
- ▸ Python / Bash exploit scripts
- ▸ Payload obfuscation & evasion
- ▸ CVE reproduction & PoC writing
Secure Code Review
Manual and automated source code analysis to find security flaws early.
- ▸ Hardcoded secrets & credentials
- ▸ Insecure deserialization
- ▸ Improper input validation
- ▸ Dependency vulnerability audit
- ▸ SAST tooling integration
Vulnerability Assessment
Systematic identification and prioritization of vulnerabilities across web and network assets.
- ▸ CVE research & analysis
- ▸ CVSS scoring & risk rating
- ▸ Remediation roadmap
- ▸ Re-testing & validation
//04 ARSENAL