Top 5% in TryHackMe Red Team Labs

Bypassing Endpoint Detection & Response (EDR) – Testing obfuscated payloads, AMSI bypass, and sandbox evasion techniques
Red Team Tooling – Utilizing frameworks like Cobalt Strike, Empire, and custom malware development to simulate nation-state and APT-style attacks.
Web Exploitation – Discovering SQLi, SSRF, XXE, and business logic flaws in modern web applications.
Active Directory Attacks – Exploiting misconfigured group policies, Kerberoasting, and NTLM relay attacks to escalate privileges.
Privilege Escalation – Identifying and abusing kernel exploits, misconfigured sudo rules, and DLL hijacking on Windows and Linux environments.
Lateral Movement & Post-Exploitation – Pivoting across networks using Pass-the-Hash, token impersonation, and living-off-the-land binaries (LOLBins).

Securing a Tech Startup from Credential Stuffing Attacks

The Problem: A fast-growing tech startup noticed suspicious login attempts on employee accounts. Their internal logs showed multiple failed login attempts from different regions—signs of a credential stuffing attack.
Our Approach:Identified leaked employee credentials on the web through OSINT research.
Simulated an attack using known compromised passwords to confirm weak authentication security.
Recommended passwordless authentication, adaptive MFA, and account lockout policies.
Outcome: We blocked a potential account takeover attack before any sensitive data was compromised.

Exposing Hidden Vulnerabilities in a Financial Institution’s Web App

The Problem: A financial services company wanted a deep-dive penetration test of their web application to ensure customer accounts were secure.
Our Approach:Discovered an insecure direct object reference (IDOR) vulnerability, allowing unauthorized access to other users' financial data.
Found misconfigured API endpoints leaking sensitive transaction history.
Simulated a real-world attack, proving how an attacker could extract financial records.
Outcome: We helped the company remediate the flaws before they could be exploited, securing over 1000+ customer accounts.

Stopping a Ransomware Attack Before It Happened

The Problem: A medium-sized manufacturing firm reported strange network slowdowns and unauthorized file access attempts. We suspected early-stage ransomware activity.
Our Approach: Deployed network traffic analysis and found suspicious lateral movement from an unrecognized endpoint.
Traced the attack to a compromised administrator account running an undetected PowerShell script.
Isolated the infected machine, stopped the attack, and implemented stronger access controls.
Outcome: The company avoided a catastrophic ransomware attack that could have cost them thousands in downtime and recovery.

Strengthening Security for a Healthcare Provider Handling Sensitive Data

The Problem: A healthcare organization needed to comply with data protection regulations and secure patient records against cyber threats.
Our Approach: Conducted an external attack surface assessment, finding unprotected database instances.
Simulated phishing attacks to test employee security awareness—over 30% of staff clicked a fake malicious link.
Implemented advanced access controls and staff security training to reduce human error risks.
Outcome: The organization reduced its attack surface by 85% and achieved full compliance with industry security standards.

Eliminating Insider Threats for a Corporate Firm

The Problem: A company suspected insider threats after confidential documents were leaked. They needed discreet forensic analysis.
Our Approach: Conducted endpoint monitoring and log analysis to trace unauthorized access attempts.
Found that a disgruntled ex-employee still had access to internal systems.
Implemented strict offboarding protocols and real-time monitoring to prevent future data leaks.
Outcome: The company secured its internal data and prevented future insider threats.