Hello, I'm 0xSt1llS0ul
Penetration Tester | Security Researcher | Tool Developer
I focus on Web & Network Penetration Testing, security task automation, and WAF Evasion. I am currently expanding my skills in Reverse Engineering and Malware Development. I build tools to simplify complex attack vectors and improve audit efficiency.
Technical Stack
- OS: Linux, Windows (AD & Pentest targets)
- Languages: Python, Bash, MySQL, Go
- Networking: Wireshark, Tcpdump, Aircrack-ng, Kismet
- Web & Proxies: Burp Suite, OWASP ZAP, Nikto, Dirb/Gobuster
- Frameworks & Tools: Metasploit, Nmap, SQLMap, Ghidra, Hydra, John the Ripper, BloodHound
- Version Control: Git, GitHub
- Containers: Docker
Areas of Interest
- Web Security: Vulnerability assessment, WAF bypass techniques, API Security
- Network Security: Infrastructure auditing, protocol analysis
- Cloud Security: AWS, CloudFlare WAF analysis
- Tool Development: Writing custom scripts and exploit automation
- Reverse Engineering: Analyzing binaries and malware (Learning phase)
- Malware Development: Creating and analyzing payloads and exploits
- Code Review: Security-focused source code analysis
Learning Path Currently deepening knowledge in:
- DevOps & Infrastructure: CI/CD pipelines, infrastructure as code
- Reverse Engineering: Binary analysis techniques
- Cloud Technologies: AWS services and security
- Databases & Search: Redis, ElasticSearch for pentesting scenarios
- QA & Testing: Security testing methodologies
- Container Security: Docker security best practices
- Malware Development: Anti-Virus Evasion techniques, creating sophisticated implants