Offensive Security · Red Team · AI-Driven Offensive Tooling · Python Automation · Creator of Gemsy.es

Offensive security practitioner focused on Active Directory / Kerberos attacks, manual exploitation (no frameworks), and post-exploitation across Windows and Linux. Strong background in Python automation, data engineering and cloud, applied both to production systems and to offensive tooling.

Current R&D focus → AI applied to Red Teaming. Researching how to integrate LLMs and agents into offensive workflows: automating recon triage, assisting exploit-chain reconstruction, and generating engagement reports. Bridging two tracks — offensive security and applied AI — into a single toolset.

Preparing OSCP. Also building an AI-driven SaaS product in production.

Where most of the research time goes right now:

• LLM-assisted recon & triage — parsing and prioritizing enumeration output (LDAP, SMB, RPC, web) so the signal surfaces faster.
• Agentic tooling — experimenting with AI agents that reason over host/AD state and suggest the next step in an exploit chain.
• Automated reporting — turning raw engagement notes into structured, reproducible findings.
• Semantic analysis over logs/scans — clustering and retrieval over large enumeration datasets.

Goal: a practical AI-augmented offensive toolkit, grounded in real lab work rather than hype.

Active Directory & Kerberos Kerberoasting, AS-REP roasting, SPN enumeration and hijacking, TGT/ST abuse, ACL abuse, delegation attacks (unconstrained/constrained/RBCD), trust abuse.

Tooling & Manual Exploitation Impacket internals (debugging protocol edge cases: clock skew, malformed tickets), manual exploit chains without relying on all-in-one frameworks, pivoting with Ligolo-ng.

Post-Exploitation Privilege escalation on Windows and Linux, credential harvesting, lateral movement, persistence techniques — all practiced in authorized lab environments.

Practice Active on HackTheBox — completed machines spanning Active Directory, web exploitation and privilege escalation (Gavel, Editor, DarkZero, Outbound, among others). Public profile linked below.

• Python automation and scripting (scraping, data pipelines, API integrations)
• Data engineering: ETL, enrichment pipelines, scheduled jobs
• Cloud & infra: VPS hardening (nginx, systemd, ufw, fail2ban), deployment automation
• Builder of production SaaS with real users and payments — applying the same security mindset to what I ship as to what I break

Open to red team / offensive security collaboration and CTF write-ups.