Hi ! In this blog, I will explore computer science in depth from a security perspective as it allows to cover an important number of subjects from hardware hacking to machine learning and data processing. This blog aims at detailing tools of a pentester and show that pentesting is more about having expertise on numerous subjects than resolving online challenges (CTFs) which deviate from real-life assessments.
As a result you will not only see cybersecurity subjects but also data science topics, and not only technical cybersecurity topics but also organizational or architectural topics encountered in real engagements. I will mainly provide methods and tools to be able to handle any engagement where you do not know the topic beforehand, since it is a common use case in real pentesting where you can assess the security posture of extravagant systems.
Moreover, articles are meant to evolve. So, I might come back to an article from time to time to add interesting content.
Articles will be written in English as well as in Spanish or French sometimes. You can find below my social media profiles, I am open to discussing subjects if you want to share a thought.
La science des données abordée à travers des sujets techniques tels que la conception des systèmes, le big data, les systèmes distribués, le data mining et la compréhension de l'architecture d'un modèle via sa rétro-ingénierie
Complete guide on EDR evasion in modern environments tackling various concepts such as indirect syscalls, ETW patching, call stack spoofing and hiding indirect syscalls via stack manipulation. This article exlains how to develop a solution in Rust.
Complete guide on AWS multi-account environments, governance and security architecture.
Análisis y uso de SnaffleRust para enumeración SMB en entornos ofensivos.
DNS tunnels analysis and debugging using Dig.
Practical introduction and basic exploitation of buffer overflows in x86 architectures.