You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Log4j vulner testing environment based on CVE-2021-44228. It provide guidance to build the sample infrastructure and the exploit scripts. Supporting cooki3 script as the main exploit tools & integration
Full kill-chain pentest against GOAD — AS-REP roasting, Kerberoasting, constrained-delegation abuse, DCSync and Golden Ticket. Three independent paths to Domain Admin on north.sevenkingdoms.local. 41 findings mapped to MITRE ATT&CK with detection signals and mitigations. Graduation thesis.
Working offensive security methodology — per-phase playbook covering recon, exploitation, post-exploitation, Active Directory, cloud, and reporting. Built on PTES, OWASP, MITRE ATT&CK + lab experience.
Full penetration testing writeup of the Forgotten Portal DockerLabs machine, documenting vulnerability assessment, security findings, and remediation priorities. Includes 28 annotated screenshots, technical and executive reports, PTES methodology, CWE classifications, and MITRE ATT&CK mapping.
Rapport de test d'intrusion complet (PTES/OWASP) contre un lab Metasploitable3 — EternalBlue, BlueKeep, injection SQL, XSS et 11 vulnérabilités critiques documentées de bout en bout.
Pentest support system guided by OWASP WSTG, OWASP Top 10, API Security Top 10 and PTES: scope, checklists, CVSS 3.1 findings, tool-output import and DOCX reports.
A curated, interactive reference for selecting the right penetration testing framework for any engagement — from government compliance audits to mobile app assessments.
Portfólio prático de Segurança Ofensiva: Testes de Intrusão (Pentest Blackbox), Análise de Vulnerabilidades Web (OWASP Top 10), Escalação de Privilégios (Linux/Windows) e Elaboração de Relatórios Técnicos e Executivos.
Framework de IA multiagente para evaluaciones de seguridad autorizadas bajo PTES, enfocado en OSINT, gestión de evidencias, validación, control de políticas y orquestación independiente del LLM.