Portrait of BeriContraster against a red background
Grayscale portrait of BeriContraster
©2022

CYBERSECURITY CONSULTANT

/SECURING SINCE 2022

Hey!

I’m an offensive security professional focused on finding the vulnerabilities that actually matter.

I simulate real-world attacks across web applications, APIs, Active Directory, and cloud environments, then turn the findings into realistic attack paths and clear, actionable risks for engineering teams and leadership.

I’m OSCP and CPTS certified, with hands-on experience delivering penetration tests for high-impact and regulated environments. I also write technical content and release vulnerable boxes for the community.

About
Security testing that goes beyond scanner output. Every engagement ends with proven attack paths, clear risk ratings, and remediation your team can act on.

Services

Web & API Testing

OWASP Top 10

Auth & Access

Business Logic

Cloud Security Testing

IAM Review

Misconfigurations

Attack Paths

Active Directory Testing

Privilege Escalation

Lateral Movement

AD Hardening

Network Security Testing

Internal

External

Vulnerability Assessment

Featured Projects

View All Work
SillyAuthority lab artworkBlackSite artwork

Community labs / Offensive security

BlackSite

A collection of hand-built vulnerable environments for practicing real-world offensive security, Active Directory attacks, and privilege escalation.

Explore the labs

Security Blogs

View All Blogs

CVE-2026-98432 Linux kernel TCP use-after-free vulnerability and remote code execution

October 30, 2026 · 9 min read

CVE-2026-98432: Linux Kernel TCP Use-After-Free RCE

CVE-2026-98432 is a critical Linux kernel use-after-free vulnerability that could enable unauthenticated remote code execution. Explore affected versions, technical details, and mitigations.

 Security advisory graphic for CVE-2026-110447, a critical command-injection vulnerability in the Nextcloud built-in Collabora CODE Server

October 27, 2026 · 4 min read

CVE-2026-110447: Critical RCE in Nextcloud Built-in Collabora CODE Server

Technical breakdown of CVE-2026-110447, an unauthenticated command-injection flaw in Nextcloud's richdocumentscode app, with real-world incident details, IOCs, affected versions, and remediation.

 PHP2Shell: two critical PHP remote code execution vulnerabilities, CVE-2026-109618 and CVE-2026-109619

October 24, 2026 · 9 min read

PHP2Shell: Critical PHP RCE Vulnerabilities Explained

Technical analysis of PHP2Shell (CVE-2026-109618 and CVE-2026-109619), covering discovery, affected PHP versions, exploitation mechanics, and remediation.

Let’s talk.

Have a project or need help? Fill out the form, and we'll get back to you soon.