press any key to skip
Ethical Hacker · Manager @ Deloitte
Ethical Hacker | Manager — leading exciting projects to make a world a better place
For me, computation is a tool to make a difference. I believe that with such technologies available, I, by becoming a Computer Engineer, can create devices and services that will make people's life simpler, the world safer and more accessible.
Desktop
A working terminal and a few apps. Type help, or open one from the Dock.
19 items
28 May 2026 · 9 min read
Server-Side Request Forgery rarely ends at the bug bounty triage queue. Here is how a 'low-impact' blind SSRF becomes full cloud compromise when you understand the metadata layer.
Read the post →19 Apr 2026 · 11 min read
Most AD compromises are not zero-days — they are predictable paths through misconfigured trust. A mental model for thinking about Active Directory the way an attacker actually does.
Read the post →
16 badges · ← → to browse
Certifications
On the kill-chain rings, grouped by discipline. Select a badge for the details and the credential.
BlockSynergy is an insane-difficulty Linux box built around a Flask "blockchain" web application and a developer-centric smart-contract / backup pipeline.
Sept 2026 Writeup · Hack The Box JeevesJeeves is a medium-difficulty standalone Windows box built around a forgotten Jenkins instance and a developer's password manager.
Aug 2026 Writeup · Hack The Box DanglingTreeDanglingTree is a medium-difficulty Windows Active Directory box built around a Server 2025 domain controller that doubles as an Enterprise CA and hosts a Windows Admin Center portal and a SmarterMail server.
Aug 2026 Writeup · Hack The Box BedsideBedside is a medium-difficulty Linux box whose foothold is a pickle-deserialization bug in pdfminer.six (CVE-2025-64512), and whose root is the same bug class in a MONAI trainer's torch.load().