My focus is building practical offensive security skills through realistic lab environments, attack simulations, and detailed technical documentation. I enjoy breaking down complex security concepts into actionable learning while continuously expanding my expertise in red team operations, penetration testing, and cybersecurity.
- Cybersecurity Internships
- Junior Penetration Tester Roles
- Red Team Opportunities
- Security Operations Roles
- Vulnerability Assessment Projects
- Offensive Security Research & Collaboration
Windows Full-Chain Compromise
### Overview Complete attack chain simulation against a Windows environment involving payload delivery, privilege escalation, credential extraction, and lateral movement.| Metric | Details |
|---|---|
| Stack | Metasploit, msfvenom, Meterpreter |
| Scale | Multi-stage Attack Chain |
| Performance | Successful SYSTEM Compromise |
| Security | Privilege Escalation |
| Impact | Full Host Ownership |
| Repository | Private Lab |
Generated payloads, established Meterpreter sessions, escalated privileges to SYSTEM, extracted NTLM hashes, and executed Pass-the-Hash attacks.
Active Directory AS-REP Roasting Lab
### Overview Enterprise Active Directory environment built from scratch for authentication attack simulation.| Metric | Details |
|---|---|
| Stack | Windows Server, Impacket, Hashcat |
| Scale | AD Environment |
| Performance | Credential Recovery |
| Security | Kerberos Attacks |
| Impact | Domain Enumeration |
| Repository | Private Lab |
Implemented vulnerable Kerberos configurations, captured AS-REP hashes, and recovered plaintext credentials through custom wordlists.
OWASP Top 10 Web Security Lab
### Overview Hands-on exploitation of common web application vulnerabilities.| Metric | Details |
|---|---|
| Stack | DVWA, Burp Suite, SQLMap |
| Scale | Multi-Vulnerability Testing |
| Performance | Successful Exploitation |
| Security | OWASP Top 10 |
| Impact | Security Assessment |
| Repository | Private Lab |
Performed SQL Injection, Command Injection, Authentication Bypass, and File Upload exploitation exercises.
Network Reconnaissance Framework
### Overview Comprehensive attack surface mapping and reconnaissance methodology.| Metric | Details |
|---|---|
| Stack | Nmap, Recon-ng, WHOIS |
| Scale | Multi-Target Enumeration |
| Performance | High Coverage Discovery |
| Security | Recon & OSINT |
| Impact | Improved Visibility |
| Repository | Documentation Repository |
Developed structured workflows for reconnaissance, enumeration, and attack surface analysis.
2025 – Present
Hands-on cybersecurity practitioner focusing on enterprise attack simulations, penetration testing methodologies, and red team operations.
- Active Directory Security Testing
- Web Application Exploitation
- Windows Privilege Escalation
- Credential Attacks & Lateral Movement
- Post-Exploitation Techniques
- Red Team Simulations
- Security Documentation & Lab Development
Skills: Metasploit Burp Suite Hashcat Impacket Hydra Nmap BloodHound
| Recognition | Details |
|---|---|
| Active Directory Lab Builder | Built Complete AD Attack Environment |
| Offensive Security Portfolio | Fully Documented Attack Chains |
| Continuous Learner | CEH & ISC2 CC Preparation |
| Security Mentor | Guided New Cybersecurity Learners |
| Practical Researcher | OWASP & Enterprise Attack Simulation |
