Conducted internal network penetration tests involving host discovery, port scanning, service enumeration, vulnerability identification, exploitation, and post-exploitation across Windows and Linux environments.
Performed network reconnaissance and service enumeration using Nmap and other security tools, assessing HTTP/HTTPS, SMB, SSH, FTP, and other exposed services.
Conducted vulnerability assessments using Nessus, analyzed scan results, manually validated findings to reduce false positives, assessed security impact, and documented remediation recommendations.
Assessed Active Directory environments through domain enumeration, user/group discovery, privilege relationship analysis, and identification of security misconfigurations and attack paths.
Tested Active Directory attack techniques including LLMNR/NBT-NS poisoning, SMB relay, IPv6/DNS takeover with mitm6, Kerberoasting, pass-the-hash/pass-the-password, credential dumping, and NTDS.dit extraction.
Performed privilege escalation, lateral movement, credential attacks, pivoting, file transfers, and post-compromise enumeration using tools including BloodHound, Responder, Mimikatz, Metasploit, and Impacket.
Performed web application penetration testing covering reconnaissance, subdomain enumeration, SQL injection, XSS, command injection, insecure file upload, and common web security weaknesses.
Produced professional penetration testing reports containing technical evidence, vulnerability impact, attack paths, severity analysis, remediation recommendations, and mitigation guidance.