┌─[fxlpz@sec]─[~]
└──╼ $ cat profile.txt
Offensive Security Specialist focused on vulnerability research and penetration testing. Passionate about breaking systems ethically to strengthen digital security posture.
Role: CTF Player | Red Team Jr | Pentest Jr
Age: 23
Mission: Finding and exploiting vulnerabilities before malicious actors do
web_exploitation:
- SQL Injection & NoSQL Injection
- Cross-Site Scripting (XSS)
- Server-Side Request Forgery (SSRF)
- Local/Remote File Inclusion
- Insecure Direct Object References
binary_exploitation:
- Buffer Overflow Attacks
- Return-Oriented Programming (ROP)
- Format String Vulnerabilities
- Reverse Engineering
network_penetration:
- Port Scanning & Service Enumeration
- Network Pivoting & Lateral Movement
- Active Directory Exploitation
- Wireless Security Assessment
post_exploitation:
- Linux Privilege Escalation
- Windows Privilege Escalation
- Persistence Mechanisms
- Data Exfiltration TechniquesReconnaissance → nmap | masscan | gobuster | ffuf
Web Testing → Burp Suite Pro | OWASP ZAP | sqlmap
Exploitation → Metasploit | Empire | Cobalt Strike
Binary Analysis → Ghidra | IDA Pro | radare2 | gdb
Network Analysis → Wireshark | tcpdump | Responder
Post-Exploitation → BloodHound | Mimikatz | PowerSploit
primary_languages = ["Python", "Bash", "C", "Go"]
scripting = ["JavaScript", "PowerShell", "Perl"]
specialization = "Security Tooling & Exploit Development"
def approach():
return "Automate everything, document nothing sensitive"┌─[●] Active Engagements
│
├─[→] CTF Competitions
│ └─ Participating in challenges across multiple platforms
│ Focus: Web, Binary, Crypto, Forensics
│
├─[→] Bug Bounty Programs
│ └─ Hunting vulnerabilities in real-world applications
│ Platforms: HackerOne, Bugcrowd, Intigriti
│
├─[→] Red Team Operations
│ └─ Simulating advanced persistent threats
│ Objective: Test detection and response capabilities
│
└─[→] Continuous Research
└─ Studying emerging attack vectors and defense mechanisms
Focus: Zero-day research, CVE analysis[1] RECONNAISSANCE → Gather intelligence on target systems
[2] SCANNING → Identify open ports and services
[3] ENUMERATION → Extract detailed system information
[4] EXPLOITATION → Gain unauthorized access
[5] POST-EXPLOITATION → Maintain access and escalate privileges
[6] REPORTING → Document findings with remediation guidance
In the world of cybersecurity, the best defense comes from understanding the offense. Every vulnerability discovered is an opportunity to make systems stronger. Every exploit developed is a lesson in secure architecture.
Security is not about building impenetrable walls it's about understanding how walls can be breached and constantly reinforcing them.
┌─[fxlpz@sec]─[~/connect]
└──╼ $ ls -la contacts/- LinkedIn:
- Twitter/X:
- Email:
- HackTheBox:
- TryHackMe:
- Bug Bounty:
[In Progress]
├─ Desec Certified Penetration Tester (DCPT)
├─ null
└─ ...
[Continuous Learning]
└─ Staying updated with latest CVEs, exploits, and security research
┌─[fxlpz@sec]─[~]
└──╼ $ echo "Hack the planet. Secure the future." | sha256sum
3c7d8f9a2b1e5c4d6f8a9b0c1d2e3f4a5b6c7d8e9f0a1b2c3d4e5f6a7b8c9d0 -
┌─[fxlpz@sec]─[~]
└──╼ $ exit