All-in-one AI-assisted cybersecurity desktop workspace built with Electron and Python. Consolidates interactive chat, security tool execution, real-time evidence tracking, an integrated code editor, manual terminal, and automated reporting.
Practitioner-level PortSwigger lab exploiting error-based blind SQL injection on Oracle DB via the TrackingId cookie to extract the administrator password
Practitioner-level PortSwigger lab exploiting boolean-based blind SQL injection via the TrackingId cookie to extract the administrator password character by character
Experiencia y metodología aplicada para obtener la certificación eJPT de INE/eLearnSecurity. Un examen práctico de penetration testing en un entorno corporativo simulado.
Medium difficulty IR challenge involving ransomware analysis, PCAP forensics, and AI-assisted flag recovery
Easy Linux machine involving SQL Injection and password reset token exploitation.
Easy Linux machine focused on basic web exploitation and straightforward privilege escalation.
Easy Linux machine featuring Dolibarr CMS exploitation and SUID privilege escalation
Desktop application developed in Java with JavaFX to securely store, manage, and retrieve passwords using encryption.