- Penetration testing and red team
- External and internal pentests, vulnerability assessment, adversary simulation, attack surface analysis, red team operations, MITRE ATT&CK based campaign design.
- Active Directory
- Enumeration, privilege escalation, lateral movement: BloodHound, Rubeus, Mimikatz, PowerSploit, Impacket, NetExec, Certify.
- Web and mobile
- OWASP Top 10, Burp Suite, SQLmap, Feroxbuster, MobSF, Frida.
- Cloud and Kubernetes
- Cloud security assessments on Azure and AWS, EDR evasion and detection testing, Kubernetes internals (BadPods, RBAC privilege escalation, container escape, secrets exposure, etcd).
- Social engineering and physical
- Phishing campaigns, QRishing, piggybacking and physical access testing, including critical infrastructure environments.
- C2 frameworks
- Havoc, Empire, Metasploit.
- AI red teaming
- Prompt injection, model evasion, data tampering, LLM security evaluation, plus using AI day to day to speed up recon, reporting, and tooling.
- Scripting
- Python, Bash, PowerShell.
- Tools and frameworks
- Pentera, Horizon3, Nessus, Nmap, Nuclei, TestSSL, MITRE ATT&CK, OWASP, OSSTMM, PTES, TLPT.
