Pentest on Hello Friend

Poo-Prolab HTB

Sat, 15 Aug 2026 14:15:53 +0200

Waiting screen.

Dante-Prolab HTB

Fri, 14 Aug 2026 00:15:27 +0200

Finally pwned

Overview

Dante Pro Lab is a great environment that mix both Linux and Windows Operating Systems. It’s permit to practice Enumeration, Exploit Development, Lateral Movement, Privilege Escalation, Web Application Attacks.

Synopsis

Dante LLC have enlisted your services to audit their network. The company has not undergone a comprehensive penetration test in the past, and want to reduce their technical debt. They are concerned that any actual breach could lead to a loss of earnings and reputation damage.

GOAD-Mini

Mon, 06 Apr 2026 22:25:49 +0200

What is it?

GOAD or Game Of Active Directory, is an open source project created by Mayfly (Orange Cyberdefense). It provides a intentionally vulnerable Active Directory lab environment designed for practicing pentest techniques in a legal and controlled setting.

It covers a wide range of AD attack scenarios: enumeration, ACL abuse, Kerberos attacks, ADCS, NTLM relay, and much more.

Several lab sizes are available, from the minimal 2-VM MINILAB to the full GOAD with 5 VMs across 3 domains.

Pentest

Sat, 27 Sep 2025 17:54:12 +0100

Penetration testing on a simulated enterprise infrastructure. See PDF Report

Project Description

This project, conducted at Sorbonne University, consisted of a comprehensive penetration testing exercise on Windows and Linux environments, including web application audits. I applied a rigorous end-to-end methodology:

Reconnaissance & Scanning: Used Nmap for network mapping and service discovery.
Web Analysis: Performed fuzzing and application penetration testing using Burp Suite.
Exploitation: Executed brute-force attacks via Hydra, researched CVEs on ExploitDB, and performed exploitation with Metasploit.
Reporting: Authored a detailed audit report covering vulnerabilities, impact analysis, and remediation recommendations.

Added Value & Professional Objectives

This experience allowed me to consolidate a strong foundation for my cybersecurity career: