Who I Am

Offensive Security Researcher

Penetration Tester ( Web, AD)

CTF Competitor

Aspiring AI Red Teaming

I’m a cybersecurity specialist focused on offensive security, network penetration testing, and vulnerability research. My work spans from Web penetration testing, enterprise network assessments, Active directory penetration testing to Binary exploitation/exploit development

---

Certifications & Credentials

CPTS : Certified Penetration Testing Specialist (HackTheBox Academy)

• Full enterprise network penetration testing

  Web pentest

  Active Directory exploitation

  Post-exploitation

  Network Pivoting

  Lateral movement

  Privilege escalation

  Pillaging

  & reporting

PNPT : Practical Network Penetration Tester (TCM Academy)

• Network reconnaissance & exploitation

  Lateral movement

  Active Directory Exploitation

  Privilege escalation Windows/Linux

  network pivoting

  report writing

CWES : Certified Web Exploitation Specialist old ( Hackthebox Acadmy)

• Web application penetration testing

  Web API testing

  Bug bounty mindset

  Modern web vulnerability exploitation

  web vulnerabilities chaining

Bug bounty Hunter At HackerOne
With one valid bug reported

---

Core Expertise

Web Application Security

Expertise in modern web vulnerabilities: API auditing, JWT vulnerabilities, SQLi, XSS, SSRF, XXE, IDOR, authentication bypasses, ViewState deserialization RCE on .NET/IIS, insecure deserialization chains, server-side template injection (SSTI).

Binary Exploitation & Reverse Engineering

I mastered binary exploitation skills through root-me.org | pwn.college | and by participating in CTF Low-level exploitation expertise: buffer overflows, ROP chain construction, heap exploitation (UAF, double-free), format strings, shellcoding, kernel vulnerability analysis.

Active Directory & Network Penetration Testing

End-to-end AD attack chains: Kerberoasting, AS-REP Roasting, Pass-the-Hash, DCSync, ADCS OU abuse, GenericAll privilege escalation, deleted object restoration via LDAP, Kerberos-only environment lateral movement.

Recent cases: Trust exploitation across domain boundaries, ADCS ESC attacks, AD ACL abuse chains, Windows ACL exploitation, privilege escalation via deleted user restoration.

CTF Competitive Play

Active CTF player across multiple platforms (HackTheBox, picoCTF, CTFtime). Specializing in:

• Pwn/binary exploitation
• Web application security
• Reverse engineering

Achievement: Wienner of Beninese CTF competition Hackerlab 2024

---

Current Focus

• Web Expert and Bug bounty::
• AI Red teaming:: deep analyse AI agents attack prompts injection, jaibreaking,…
• Vulnerability Research: Deep analysis of emerging CVEs, kernel exploits, and attack primitives
• CTF Excellence: Refining team strategy and competing in high-caliber competitions

---

Philosophy

I believe in:

• Rigorous methodology — Slow + documented > fast + sloppy
• Collaborative security — A team that communicates wins together
• Continuous learning — Every vulnerability teaches something new
• Practical application — Certifications are checkpoints, real skills are the destination
• Ethical responsibility — Offensive skills = defensive duty

---

• GitHub: top0n3
• LinkedIn: Open to discussing offensive security, pentest opportunities, research collaboration linkedin

---

“The best offense is deep understanding of your own defense.”

Last updated: May 2026