01 Certifications

PNPT Practical Network Penetration Tester TCM Security
PJPT Practical Junior Penetration Tester TCM Security
eJPT Junior Penetration Tester INE Security
OSCP Offensive Security Certified Professional OffSec — In Progress
CRTP Certified Red Team Professional Altered Security — In Progress

02 Badges & Verification

Click a badge to verify it, or view it larger.

03 Skills

Offensive / AD

BloodHound CE, AzureHound CE, Mimikatz, Impacket, Rubeus, CrackMapExec, PowerView, Evil-WinRM, Responder, Metasploit, Burp Suite — Kerberoasting, AS-REP Roasting, ACL/DACL abuse, Pass-the-Hash, Pass-the-Ticket, lateral movement, forest trust exploitation, PSRemoting backdoors

SIEM & Detection

Microsoft Sentinel (KQL — advanced), Splunk (SPL), Security Onion, FortiEDR, Halcyon EDR, FortiMail, Greenbone, Nessus, Wazuh, Zabbix

Detection Frameworks

MITRE ATT&CK, Cyber Kill Chain, Pyramid of Pain, NIST 800-61, NIST CSF, CVSS, PCI-DSS, HIPAA

Cloud / Identity

Microsoft Entra ID (Azure AD), M365 investigations, OfficeActivity log analysis, sign-in anomaly review, conditional access review, privileged role abuse investigation

Malware Analysis

FLARE VM, Ghidra, IDA Pro — static and dynamic analysis, IOC extraction, TTP mapping

Web Security

OWASP Top 10, Burp Suite, SQLMap, Nikto — application enumeration, injection, authentication bypass

Scripting

Python, PowerShell, Bash — custom tooling, API integration, automation, log enrichment

Infrastructure

Docker, Docker Compose, Vagrant, VirtualBox, pfSense, Debian Linux, systemd — lab build and hardening

Hardware / Field IT

Component-level soldering and board-level repair, PC/laptop/mobile diagnostics and rebuild, firewall configuration, ticketing system administration, data recovery

Platforms

HackTheBox (Dante Pro Lab), OffSec Proving Grounds, TryHackMe