Penetration Tester

• Built and automated cloud-based attack infrastructure in AWS, GCP, and
Azure using Terraform, deploying Cobalt Strike servers, redirectors, and
Windows/Linux machines with Apache Guacamole for seamless remote
access.

• Configured and secured Cobalt Strike C2 operations, deploying HTTPS
redirectors, TLS certificates, IP whitelisting, and domain fronting via Azure
CDN, Google Cloud CDN, and AWS Lambda to evade detection.

• Executed advanced post-exploitation and network pivoting, leveraging
SMB/TCP Beacons, SOCKS proxy tunneling, beacon chaining, process
injection, and SQL exploitation for stealthy lateral movement.

• Compromised Active Directory environments, executing Kerberoasting,
NTDS.dit extraction, ADCS misconfigurations, DCSync, and password
spraying to escalate privileges and gain domain control.
• Bypassed EDR and antivirus defenses, deploying in-memory payloads, AMSI
bypasses, BOFs, and custom Cobalt Strike profiles to maintain operational
stealth.

• Harvested credentials and exploited file upload vulnerabilities, leveraging
Cobalt Strike, Impacket tools, and misconfigurations to capture domain
credentials, escalate privileges, and establish persistence.

A 20-week immersive cybersecurity training academy and apprenticeship program focused on

Conducting a web application vulnerability assessment for a non-profit organization, following OWASP standards, and created a detailed security report with findings, mitigation recommendations, and improved assessment ROI.
Performing threat intelligence analysis, OSINT gathering, and social engineering exercises to identify security weaknesses and enhance penetration testing strategies.
Developing and executing phishing simulations using GoPhish and Python automation with HIBP to assess employee security awareness, audit AUP compliance, and test organizational responsiveness.
Implementing security best practices by aligning assessments, penetration testing methodologies, and SOC monitoring with frameworks such as NIST SP 800, ISO 27001:2, and CIS Top 18 while utilizing Nessus, Nmap, and SSL scanning for vulnerability detection.

Built an Active Directory lab in AWS with a domain controller and two clients, performing LLMNR poisoning, SMB relay, MITM6 attacks, and lateral movement.
Executed various exploitation techniques, including SQLi, XSS, MFA bypass, IDOR, XXE, WPA2 cracking, Credential Dumping, GPP abuse, Kerberoasting, Token Impersonation, Golden/Silver Ticket attacks, NTDS.dit extraction, Buffer Overflows, and ZeroLogon.
Utilized offensive security tools, including BloodHound, Maltego, Plumhound, PingCastle, Covenant, Empire, Impacket, PowerSploit, Responder, ldapdomaindump, CrackMapExec, and NetExec.