About Me
0xDevSecurity Engineer | Software Developer [+] Breaking systems to make them stronger [+] Building secure, scalable software [+] Focus: Red Teaming | Offensive Security [+] Mindset: Think offensive. Build defensive. [+] eCPPT - Certified Professional Penetration Tester [+] eJPT - Junior Penetration Tester [+] CompTIA Security+ [+] HPE Network Security AssociateJuly 1, 2026
HTB Wide - Reverse Engineering Challenge
The Wide Challenge is a simple reverse engineering task. Let's analyze the binary and write a custom c program to decrypt the flag.
June 15, 2026
Simple Pivoting with Ligolo-NG: A Tun-Based Alternative to SOCKS
Traditional SOCKS proxies can slow down network scanning and tool compatibility during penetration tests. This guide demonstrates how to use Ligolo-NG to establish high-performance tunnels using a TUN interface for seamless internal network routing.
May 4, 2026
Abusing SCF and LNK Files to capture NTLM Hashes in Active Directory
Malicious SCF and LNK shortcuts within Active Directory file shares allows attackers to force outbound NTLM authentication without code execution.
April 12, 2026
SMB Relay Attack - Man in the Middle
Learn how to perform an SMB relay attack by intercepting NTLM authentication and redirecting credentials to gain access to target systems.
April 1, 2026
Extracting Video from RTP Streams Using Wireshark
A comprehensive guide to intercepting and extracting video streams from RTP packets using Wireshark in a Man-in-the-Middle scenario.
February 5, 2026
IP Camera Penetration Testing Guide
Comprehensive guide to identifying and testing IP camera vulnerabilities, including reconnaissance techniques, exploitation methods, and remediation strategies.
August 28, 2025
What is XSS (Cross-Site Scripting)
Cross-Site Scripting (XSS) vulnerabilities remain one of the most prevalent web security risks, allowing attackers to inject malicious scripts into trusted websites. This article explores the types, impacts, and mitigation strategies for XSS attacks.