CYBERSECURITY CONSULTANT
Hey!
I’m an offensive security professional focused on finding the vulnerabilities that actually matter.
I simulate real-world attacks across web applications, APIs, Active Directory, and cloud environments, then turn the findings into realistic attack paths and clear, actionable risks for engineering teams and leadership.
I’m OSCP and CPTS certified, with hands-on experience delivering penetration tests for high-impact and regulated environments. I also write technical content and release vulnerable boxes for the community.
Services
Security Blogs
CVE-2026-85706: Deep Dive into GitLab’s Critical File Read Vulnerability
A technical deep dive into GitLab’s file read vulnerability, request processing, lab exploitation, affected versions, mitigation, and detection.
Pre-Win2k to Domain Admin: A Five-Step Active Directory Kill Chain — Cascading Trust
Cascading Trust: a Medium Windows AD machine chaining Pre-Win2k groups, GMSA password reads, credential reuse, and RBCD to full Domain Admin.
Fireflow — HackTheBox Detailed Walkthrough
A detailed Fireflow HackTheBox walkthrough covering Langflow CVE-2026-33017, MCP JWT abuse, lateral movement, and Kubernetes privilege escalation.
Let’s talk.
Have a project or need help? Fill out the form, and we'll get back to you soon.