“Break things ethically, fix them responsibly.”
I am a Cybersecurity Penetration Tester focused on ethical hacking, network exploitation, and vulnerability assessment. I enjoy hands-on offensive security work across web, network, and Linux/Windows environments. My goal is to turn reconnaissance into clear attack paths and translate those findings into actionable remediation advice.
- 🌍 Based in: Cottbus, Brandenburg, DE
- 📚 Studying: Cybersecurity at BTU Cottbus (Germany)
- 🎯 Current Certification Goal: CPTS (Certified Penetration Testing Specialist)
- 🛠️ Building: Pentesting tooling + documenting practical learning
🔥 Offensive Security & Workflow (Click to expand)
- End-to-End Pentesting: Scoping → Reconnaissance → Exploitation → PrivEsc → Reporting
- Web App Security: Auth bypass, Access Control, SQLi/NoSQLi, SSRF, File Handling, Deserialization
- Infrastructure: AD fundamentals, Windows/Linux Privilege Escalation (Lab-based)
💻 Scripting & Automation (Click to expand)
- Writing clean, reusable automation in Python and Bash
- Developing pentest helper scripts (enumeration, parsing, report notes automation)
- Building small security tools (HTTP testing, subdomain checks, wordlist helpers)
Certifications:
CPTS Certified Penetration Testing Specialist On-going |
CWES Certified Web Exploitation Specialist On-going |
CAPE Certified Active Directory Penetration Testing Expert On-going |
CWEE Certified Web Exploitation Expert On-going |
CWPS Certified Wifi Penetration Testing Specialist On-going |
CJCA Certified Junior Cybersecurity Associate On-going |
CDSA Certified Defensive Security Analyst On-going |
Hack The Box Stats:
- 🕹️ Activity: Actively completing Active Machines, ProLabs, Challenges & Fortress
- 🛤️ Track: HTB Academy Penetration Tester Job Path
🛡️ View HTB Academy Badges (Click to expand)
Click on the badges to verify and see more details.
Your First Battle Getting Started module completed |
The eye that sees all Network Enumeration with Nmap module completed |
Airborne delivery File Transfers module completed |
Combine the Modules Using the Metasploit Framework module completed |
Ghost in the shell Shells & Payloads module completed |
Information is not knowledge, or is it? For completing the Information Gathering - Web Edition module |
Grab the keys and move laterally Password Attacks module completed |
Light in the Dark Vulnerability Assessment module completed |
Tactical Penetration Testing Process module completed |
You need to trace before you can hunt Footprinting module completed |
Academician Introduction to Academy module completed |
Scan and execute For completing Attacking Common Services module |
I am actively building out lab notes, sanitized learning resources, and open-source tooling.
Note on HTB: I do not publish solutions or spoilers for Hack The Box Active Machines. For retired content, I share high-level learning notes and sanitized write-ups focused purely on techniques and methodology. Expect full write-ups on my website soon!
- Earn the CPTS certification.
- Earn the CAPS certification.
- Earn the CWES certification.
- Deepen knowledge in Advanced Web & Active Directory pentesting.
- Ship polished open-source tooling and offensive security documentation.
- Build a strong portfolio highlighting clear methodology and measurable progress.
