Senior Penetration Tester with 4+ years in offensive security and 80+ projects delivered, specializing in internal infrastructure and Active Directory — mapping attack paths, escalating privileges, and driving assessments to full domain compromise. My work spans finance, enterprise, and tech/SaaS environments, extending to external engagements — Web, Wi-Fi, Phishing / Social Engineering — when the scope calls for it. I also run APT attack simulations, train SOC teams to detect real-world TTPs, and work the Purple Team side. Every engagement ends with clear, prioritized, fix-focused reporting.
- 🏢 Internal Infrastructure — My main focus: Active Directory, FreeIPA, Linux, CI/CD, Kubernetes & IoT devices
- 🌐 Web & External — External-perimeter breach testing & internal corporate web services
- 📡 Wi-Fi — Wireless network security testing
- 🎣 Phishing & Social Engineering — Simulated phishing across multiple vectors (email, Telegram & more)
| Project | Description |
|---|---|
| 🧭 Redposture | Red-Team CLI for auditing exposed services |
| 🧩 OpenAPI-Sampler | Burp extension — OpenAPI/Swagger |
| 🌐 gdns2tcp | File transfer and reverse SOCKS5 tunnel over DNS |
| 🛡️ ForgeVeil | Build & obfuscation framework for C/C++ and C#/.NET |
⚔️ Red Team & Pentest
💻 Languages & Scripting
