About

## Who I am

I'm a BCA graduate and cybersecurity student with a strong foundation in computer fundamentals and programming languages like Python. My primary focus lies in penetration testing, ethical hacking, and open-source intelligence (OSINT), driven by a passion for understanding how systems work under the hood. I started playing CTFs to see how real vulnerabilities actually work, and I kept going because every challenge teaches something a textbook doesn't.

My journey into cybersecurity started during my BCA graduation when I discovered Linux and Ubuntu. I grew completely fascinated by the terminal, Bash scripting, and exploring commands. That initial curiosity naturally pulled me into cybersecurity. I started out like many do, exploring GitHub tools and running them in the terminal as a script kiddie. However, that curiosity drove me to explore much more of the field, leading me to take professional cybersecurity training filled with hands-on practical experience. Today, I combine a strong foundation in computer science and programming with continuous, day-by-day learning. and I love tackling challenges to see how real vulnerabilities work way beyond what any textbook can teach you.

## What I'm into

  • Web application security

    Injection, broken authentication, and the logic bugs scanners miss.

  • Network Pentesting

    Vulnerability Assessment, Network Scanning and Reconnaissance.

  • Active Directory Pentesting

    Domain Enumeration, Privilege Escalation, Pivoting and Lateral Movement.

  • OSINT & Digital Footprinting

    Gathering and Analyzing Public Data to Map Attack Surfaces and Assess Threats.

## Why this archive exists

Writing a solution down is the fastest way to find out whether I really understood it. This site is my notebook made public: what I tried, what failed, what finally worked, and what I'd check first next time.

Each write-up follows the same shape (overview, summary, enumeration, exploitation, lessons learned), so you can skim for the part you need. I include unsolved challenges too, because dead ends are useful to read.

Everything here targets CTF infrastructure or deliberately vulnerable labs I have permission to test. Please don't point any of it at systems you don't own.

## Toolbox

  • Nmap
  • Burp Suite
  • Gobuster
  • Hydra
  • John the Ripper
  • Wireshark
  • Metasploit
  • Nikto
  • Netcat
  • Shodan
  • Sqlmap
  • Python

## Find me

Spotted a mistake?, have a cleaner solution?, or want to team up for an upcoming event? Send a message.