I'm here to bring tangible, stable and sustainable security solutions. I identify security vulnerabilities in networks and web applications. I support startups, small & mid-sized companies and projects around the world.
Penetration Tester, with a tiny history of providing penetration testing services for computer systems, networks and web applications. I am working on increasing security. I've been testing for a couple of weeks.
Reconnaissance is about the process of gathering information on a client using open source intelligence. I extract breached credentials from databases to perform credential stuffing attacks, hunt down subdomains during client engagements, and gather information. Languages I use include Burp Suite.
Scanning & Enumeration is about the process of scanning for open ports, researching for potential vulnerabilities, and performing quality enumeration. Languages I use include Nmap, Nessus, Nikto, etc.
Gaining access or exploitation is the process of gaining access to machines, network or environment, performing manual exploitation using coding, performing brute force and password spraying attacks, and much more. Attacks include LLMNR poisoning, SMB relays, IPv6 DNS takeovers, pass-the-hash/pass-the-password, token impersonation, kerberoasting, GPP attacks, golden ticket attacks, and much more. Languages I use include Metasploit.
Maintaining Access is the process of transferring files, pivoting and maintaining access to the machine, network or environment.
Covering Tracks is the process of cleaning up like deleting logs, deleting uploaded malware, deleting created accounts.
Python, Kali Linux, Necessary Tools: Self-taught
C, Matlab, VBA: Engineering education, Industry experience
Worked on a project mainly focusing on implementing the penetration testing cycle. Main tasks involved concept, design and implementation.
Coming soon
...