- 🔴 Red Team — full-chain adversary simulation, MITRE ATT&CK emulation
- 🌐 AppSec — SAST/DAST integration, secure SDLC, CI/CD pipeline security
- ☁️ Cloud Pentesting — AWS IAM abuse, Azure Entra ID, GCP privilege escalation
- 🏰 Active Directory — Kerberoasting, ADCS ESC chains, DCSync, BloodHound
- 📱 Mobile — iOS/Android pentesting, Frida, Objection, MobSF
| Badge | Certification | Issuer | Status |
|---|---|---|---|
| 🟢 | eWPTX — Web Application Penetration Tester eXtreme | eLearnSecurity | ✅ Certified |
| 🟢 | CRTA — Certified Red Team Analyst | Altered Security | ✅ Certified |
| 🟢 | eJPT — Junior Penetration Tester | eLearnSecurity | ✅ Certified |
| 🟢 | SC-900 — Microsoft Security, Compliance & Identity | Microsoft | ✅ Certified |
| 🟡 | OSCP — Offensive Security Certified Professional | Offensive Security | 🔄 In Progress |
- 🔴 Bypassing 802.1X & Downgrading MACsec via MKPDU Suppression — Original Research
- 🔵 Attacktive Directory — TryHackMe · Medium · Active Directory