Founder : HACKMINDS | ISC2 Certified in Cybersecurity (CC) ๐ก๏ธ SOC Analyst | Pentesting | Ethical Hacker | Web Application Security | Purple Team ๐ป #HomeLab
Joined July 2026
- Tweets824
- Following78
- Followers259
- Likes515
SCRIPTEDWEB retweeted
๐ฅ Day 98 of my #200daysChallenge with @mr_kay7
๐ NETWORKWALKS INTERNSHIP ACHIEVEMENT!
โ
Week 1: 100/100
โ
Week 2: 100/100
โ
Week 3: 100/100
โ
Week 4: 100/100
๐ฏ Final Internship Exam: 99/100!
I'm grateful for the knowledge gained and the progress made throughout this
Day97 #200daysChallenge with @mr_kay7
I successfully completed a PortSwigger Web Security Academy lab on Blind SQL Injection! ๐ฏ
I learned how the SQL SUBSTRING() function can help retrieve an administrator's password one character at a time by testing the application's
SCRIPTEDWEB retweeted
Day92 #200daysChallenge with @mr_kay7
Yesterday, I started my Hacker101 CTF journey to test my PortSwigger knowledge and prepare for Bug Bounty Hunting. ๐
The challenges have been brain-racking, but every hint is a learning opportunity!
Day91 of #200daysChallenge with @mr_kay7
I completed a Portswigger lab where I was able to retrieve data from a user table with the table username and password, after which I was able to probe further to get administrator login details.
#Cybersecurity #PortSwigger #Pentesting
SCRIPTEDWEB retweeted
Day93 #200daysChallenge with @mr_kay7
๐ฉ FLAG 4 CAPTURED! ๐ฅ
Finally completed Hacker101 CTF Micro-CMS Challenge 1! ๐
The hint was: "Script tags are great, but what other options do you have?"
I investigated the existing button element, experimented with an
Day92 #200daysChallenge with @mr_kay7
Yesterday, I started my Hacker101 CTF journey to test my PortSwigger knowledge and prepare for Bug Bounty Hunting. ๐
The challenges have been brain-racking, but every hint is a learning opportunity!
SCRIPTEDWEB retweeted
Day 88 #200daysChallenge with @mr_kay7
I'm so pleased to announe that I've been offered an Ethical Hacking Internship position with TechBiz Security! ๐
This is another step forward in my cybersecurity journey. I'm excited about the opportunity to apply my hands-on experience,
Day87 #200daysChallenge with @mr_kay7
Another PortSwigger Web Security Academy lab completed! ๐
I just completed the SQL Injection UNION Attack - Retrieving Multiple Values in a Single Column lab using Burp Suite.
I first tested:
"' ORDER BY 1--"
"' ORDER BY 2--"
SCRIPTEDWEB retweeted
This time last year, I was a naked being in Cybersecurity....now, I just sabi wear Pampers in Cybersecurity ๐๐. Thanks to @TechSphereAcad for covering my nakedness ๐๐๐
SCRIPTEDWEB retweeted
Day82 #200daysChallenge with @mr_kay7
๐ Can I Still Hack It? - VulnBank Home Lab
Today I practiced Privilege Escalation in my authorized VulnBank lab.
๐น Vertical Privilege Escalation
I inspected a JWT, identified the "isadmin=false" claim, modified it
Day81 #200daysChallenge with @mr_kay7
Completed an authorized Black-Box Penetration Test ๐
The assessment covered:
โข Initial Access
โข File Exfiltration
โข PDF password cracking to assess exposure of PHI
โข Post-Exploitation: testing access to staff salary & shareholder data
SCRIPTEDWEB retweeted
To find subdomains you can use this new techniques: ๐ฅ
crt.name/v1/search?apex=micrโฆ
app.agniops.in/v1/search?domโฆ
Clean, fast and easy way to discover more subdomains. Happy Hunting. โค๏ธ
#bugbountytips #bugbountytip #bugbounty
SCRIPTEDWEB retweeted
Are you looking to stay consistent, sharpen your offensive/defensive skills, and build real-world experience alongside like-minded security enthusiasts?
โI'm launching HACKMINDS, a community built specifically for aspiring and experienced penetration testers, ethical hackers
SCRIPTEDWEB retweeted
Day71 #200daysChallenge with @mr_kay7
Another PortSwigger lab completed! ๐ฅ
OS Command Injection โ Simple Case
In this lab, I used Burp Suite Repeater to test the "stockId" parameter and injected:
"1|whoami"
Day70 #200daysChallenge with @mr_kay7
Another PortSwigger lab completed! ๐
I completed โWeb shell upload via Content-Type restriction bypass.โ
I uploaded a JPEG image and intercepted the upload request with Burp Suite. I then modified the filename to:
exploit.php
SCRIPTEDWEB retweeted
I'm now ISC2 Certified in Cybersecurity ๐๐ฏ๐ฅ๐
Another Milestone Achievement. I'm so happy on my journey so far in Cybersecurity. So grateful to God Almighty for his mercy never ceaseth.
#Cybersecurity #ISC2Certified #Pentesting #SOC #PurpleTeam
Day 54 #200daysChallenge with @mr_kay7
I'm ISC2 Certified ๐๐.
Thanks you @DataSecChron for your words of encouragement. Though the questions were total different from the drills & kind of tricky. I answered 125 questions in 120 minutes.
SCRIPTEDWEB retweeted
Encryption hides secrets.
Hashing proves truth.
Know the difference โ oneโs reversible, oneโs forever.
SCRIPTEDWEB retweeted
Milestone Win ๐
Just completed my Drupalgeddon (DC-1) Post-Exploitation Home Lab ๐ฅ
Using #Metasploit, I went from initial access through:
๐น Privilege Escalation
๐น Credential Access
๐น C2
๐น Data Exfiltration
๐น Lateral Movement
๐ฅ Full video : youtu.be/QvgAFE7KbEI
Day 37 of #200daysChallenge with @mr_kay7
Just completed Drupalgeddon (DC-1) Post-Exploitation๐ฅ Using #Metasploit,
๐ฅ Full video : youtu.be/QvgAFE7KbEI
Performed in a controlled home lab.
SCRIPTEDWEB retweeted
Post Exploitation
Day 36 of #200daysChallenge with @mr_kay7
Just finished my Drupalgeddon (DC-1) post exploitation hand-on simulation, exploiting Perl payload to gain initial access to privilege escalation, credential access, C2, data exfiltration and lateral movement on a controlled a home lab
SCRIPTEDWEB retweeted
How to become a Hacker by Zero Day Engineer @alisaesage
SCRIPTEDWEB retweeted
Curiosity took me this far. At my current age, I ve finally found what I ve passion for. During the start of my Cybersecurity journey, unsure of my passion, I also got same scholarship with TechCrush to study Data Analyst. I had to push on with it, just to make sure I get the
SCRIPTEDWEB retweeted
Day15 #200Dayschallenge Did some hands on traffic analysis.
I analyzed a malicious process (PID 1632) to map its external communication. It was eye opening to see how it reached out to multiple suspicious IPs and domains in real time.
#CyberSecurity #SOC #ThreatHunting
Wonder how we uniquely identify files in cybersecurity? It all comes down to the Hash.
Think of a hash value as a digital fingerprint a fixed length string that acts as a unique identifier for data. Itโs the result of a mathematical process called a hashing algorithm.
#HashValue
SCRIPTEDWEB retweeted
If I told you one of the best ways to explain cybersecurity is with an onion, would you believe me? ๐ง
That's the idea behind Defense in Depth. Just like an onion, valuable assets are protected by multiple layers, firewalls, AAA, IPS, content filtering, and hardened devices. ๐
SCRIPTEDWEB retweeted
Other than SIEM and Penetration Testing tools like Burp suite, there are some certain tools that should be in you to excel and scale in Cyber Security which are:
- Technical Writing
- Be able to breakdown to a non technical person
- Documentation
- Consistency & Discipline
- INTEGRITY