CYBERSECURITY CONSULTANT
Hey!
I’m an offensive security professional focused on finding the vulnerabilities that actually matter.
I simulate real-world attacks across web applications, APIs, Active Directory, and cloud environments, then turn the findings into realistic attack paths and clear, actionable risks for engineering teams and leadership.
I’m OSCP and CPTS certified, with hands-on experience delivering penetration tests for high-impact and regulated environments. I also write technical content and release vulnerable boxes for the community.
Services
Security Blogs
CVE-2026-85706: Deep Dive into GitLab’s Critical File Read Vulnerability
A technical deep dive into GitLab’s file read vulnerability, request processing, lab exploitation, affected versions, mitigation, and detection.
Pre-Win2k to Domain Admin: A Five-Step Active Directory Kill Chain — Cascading Trust
Cascading Trust: a Medium Windows AD machine chaining Pre-Win2k groups, GMSA password reads, credential reuse, and RBCD to full Domain Admin.
AI is Just Patterns — And Patterns Can Be Broken
AI is built on patterns but those patterns aren’t unbreakable. This article explores how artificial intelligence works, its limitations, and how understanding its pattern-based nature reveals both its power and its weaknesses.
Let’s talk.
Have a project or need help? Fill out the form, and we'll get back to you soon.