About
whoami 🔍
I’m an IT security professional with over eight years of hands-on experience supporting and securing enterprise environments. My background includes building and maintaining resilient network architectures, conducting security audits, and supporting production systems with a strong focus on risk reduction and operational stability.
Technical Focus
- Network and infrastructure security
- Penetration testing and attack surface analysis
- Linux and Windows post-exploitation
- Security automation and scripting
Alongside my professional work, I actively pursue continuous learning through hands-on experimentation and technical research. This has led me to develop practical skills in secure network design, penetration testing, and adversarial thinking. This blog serves as a space to document technical write-ups and case studies that reflect how I approach security work in practice. The content emphasizes methodical analysis, clear communication of risk, and the connection between technical findings and real-world impact.
This site ℹ️
Blog Posts
Writing across offensive and defensive security: threat research, current event analysis, opinion pieces, and security guidance for technical and non-technical audiences.
Case Studies
Walkthroughs of HackTheBox machines and other practice environments, written as technical analyses rather than step-by-step recipe lists. Each write-up explains why a technique works, maps findings to MITRE ATT&CK, and surfaces takeaways that apply beyond the specific target.
Most case studies are paired with a formal engagement report covering the same findings in a professional format.
Tools & Methodologies
Documentation for tools I’ve built and methodologies developed across engagements, including reconX, engagekit, and a full pentest methodology reference organized by phase.
→ Browse Tools & Methodologies
Pentest Reports
Formal penetration test reports produced against the same targets as the case studies above. Each report includes an executive summary, CVSS-scored findings, and a remediation roadmap, structured to communicate clearly to both technical and non-technical audiences.
All reports are produced against deliberately vulnerable practice environments (HackTheBox, ProLabs).