Specializing in multi-step attack path validation: AD CS PKI exploitation (ESC1 through ESC16), Kerberos delegation chains, DACL abuse graphs, and post-exploitation lateral movement across complex domain environments.
# Unauth LDAP pass-back → WriteDacl on PKI Admins → ESC4 template modify → DCSync '--How overlooked printers, switches, and over-privileged default group ACLs turn an unauthenticated network drop into a full Active Directory compromise.
$ nxc ldap <DC_IP> -u <USER> -p <PASSWORD> -M adcs_orphans '--How a certificate inconsistence on AD CS can reveal an entire AD hygiene.
Advanced enterprise Active Directory exploitation, AD CS abuse, Kerberos delegations, trust boundaries, and defense evasion.
Hands-on network penetration testing, internal pivoting, privilege escalation, and Active Directory domain compromise.
Large-scale enterprise network pivoting, multi-forest Active Directory exploitation, cross-tier lateral movement, and internal domain compromise across three flagship Pro Labs.
Internal network penetration testing, Active Directory attack paths, and AD CS auditing. Direct enterprise assessments and white-label subcontracting for specialized consultancies.
Hardened embedded Linux operating systems against ANSSI and NIST baselines at Osmium Solutions; conducted cryptographic threat analysis on distributed IoT networks at Instituto de Telecomunicações.
Available for direct enterprise internal network / Active Directory assessments and white-label capacity for offensive security consultancies: ['--dani7andrade@protonmail.com →]