PixRei
Developing Skills
Offensive security, CTF challenges, Building portfolio.
About
Penetration testing methodology focused on systematic enumeration, vulnerability analysis, and exploitation.
Core competencies include reconnaissance and OSINT, service enumeration, manual and automated vulnerability assessment, exploitation, and post-exploitation. Comfortable working with industry-standard tools and custom scripting for automation.
Currently pursuing CPTS certification while actively documenting methodologies through detailed writeups. Background in IT operations and Python automation provides strong foundation for security tooling development.
Blog
Breaking down tools, techniques, and attack paths, one module at a time
Skill Assessment - Password Attacks
Full Active Directory compromise driven by password attacks: SSH spraying, ProxyChains pivoting, cracking a Password Safe vault, LSASS dumping, pass-the-hash, and NTDS.dit extraction.
Skill Assessment - Attacking Common Services
SMB enumeration into MSSQL impersonation and self-referencing linked-server abuse, escalating to xp_cmdshell command execution as NT AUTHORITY\SYSTEM.
Access
Physical security machine exploiting anonymous FTP, MDB database credential extraction, and Windows saved credentials for privilege escalation.
Security Guides
Hardening walkthroughs, tool setups, and offensive security guides
Certifications
Building verified proof of skills
TryHackMe Jr Pentester Path
Comprehensive learning path covering penetration testing methodology and tools.
TryHackMe Red Teamer Path
Advanced path covering red team operations, C2 frameworks, and adversary emulation.
eJPT - Junior Penetration Tester
INE Security hands-on certification. 48-hour practical exam proving real pentesting skills.
CPTS - Certified Penetration Testing Specialist
HackTheBox advanced certification. Comprehensive practical exam covering full penetration testing methodology. OSCP alternative.
OSCP - Offensive Security Certified Professional
OffSec's hands-on certification covering penetration testing methodology and the Kali Linux toolset. A 24-hour practical exam with an industry reputation for difficulty.
Projects
Security tools and research
CPTS/HTB Methodology Wiki
Interactive attack decision tree built from HTB machines. Mapping enumeration to foothold to privesc across real-world scenarios
Automated Pentest Report Generator
Python tool that converts structured findings into professional PDF reports. Streamlining the reporting phase of penetration tests
Threat Hunt Dashboard
Extracts IOCs from phishing email headers and enriches them via VirusTotal and AbuseIPDB APIs. Turning raw threats into actionable intelligence.
Skills
Offensive Security
- Network & Service Enumeration
- Web Application Security
- Privilege Escalation
- Active Directory Attacks
Tools
- Nmap / Ffuf
- Burp Suite
- Metasploit
- Wireshark
Development
- Python Scripting
- Bash Automation
- Linux (Arch BTW)
- Git / Docker