#skills_and_expertise

Exploring cybersecurity one bug at a time.

#offensive_security

Greyhat Exploration

  • Web Application Vulnerability Discovery
  • File Upload & Misconfiguration Testing
  • Basic Post-Exploitation on Linux Environments
  • Investigating Suspicious Files & Backdoors on Servers
  • Using Linux Commands for Server Exploration
  • Web Shell Behavior & Server-Side Access Techniques

Black Hat Techniques

  • Penetration Testing
  • Social Engineering
  • Network Security
  • System Exploitation
  • Phishing Attacks
  • Bypassing Security Mechanisms

#development & Exploitation

Programming

  • Python
  • JavaScript
  • Shell Scripting

Database

  • MySQL
  • SQL Injection
  • Database Security
  • Cross-Site Scripting (XSS) in Database Queries
  • Time-Based Blind SQL Injection
  • Union-Based SQL Injection
  • Stored Procedures Exploitation

Web Technologies

  • HTML5
  • CSS3
  • JavaScript
  • Web Security

#tools_and_frameworks

Security Tools

    • Burp Suite
    • Metasploit
    • Wireshark
    • Nmap
    • Aircrack-ng
    • Ngrok
    • Sqlmap
    • Netcat

Security Frameworks

  • OWASP: List of the most critical security risks to web applications. A must-know for any security professional.
  • PTES (Penetration Testing Execution Standard): A comprehensive framework that outlines a penetration testing methodology, from planning to reporting.
  • NIST (National Institute of Standards and Technology): A set of standards and guidelines for building and maintaining robust cybersecurity practices, with a focus on risk management.