eJPT
eLearnSecurity Junior Penetration Tester
INE Security
flags captured7/7
Open to new opportunities
Josu
Junior pentester · MSc in Cybersecurity & AI
I learn by attacking systems in controlled environments and documenting every step: what I enumerated, what worked and why.
josu@kali: ~zsh
$ cat profile.txt
- role
- junior pentester
- education
- msc cybersecurity & ai · evolve
- certs
- eJPT
- writeups
- 5 machines · HTB
$
01whoami
About me
Junior pentester with an MSc in Cybersecurity & AI, focused on offensive security: web applications and Active Directory. I document every machine I solve —enumeration, entry vector, privilege escalation and the lesson from each phase.
Looking to join an offensive-security team, ideally remote. Methodical, self-taught and used to working as part of a team.
- Role
- Junior pentester
- Education
- MSc in Cybersecurity & AI (Evolve)
- Location
- 🇪🇸 Spain
- Availability
- Remote · CET (UTC+1)
- Languages
- Spanish (native) · English (B2)
02skills
Skills & stack
Areas and tools I work with across labs and machines.
/web
Web
- OWASP Top 10
- Command injection
- SQLi
- SSTI
- File upload
- IDOR
- LFI / path traversal
/ad
Active Directory
- LDAP / SMB enumeration
- Kerberoasting
- AS-REP roasting
- BloodHound
- Pass-the-hash
/linux
Linux privesc
- sudo -l
- SUID / capabilities
- PATH hijacking
- Cron jobs
- Credentials in files
/recon
Enumeration
- Port & service scanning
- Path & vhost fuzzing
- Version fingerprinting
- CVE research
/tools
Tooling
- Burp Suite
- nmap
- ffuf
- chisel
- netexec
- impacket
- linpeas
- Metasploit
03certs
Certifications
achieved
04writeups
Solved machines
Write-ups of retired HackTheBox machines: enumeration, entry vector, privilege escalation and lessons from each phase. The full write-ups are in Spanish.
- Medium
HackTheBox · Windows
Cascade
DC de Windows Server 2008 R2 donde cada credencial desbloquea la siguiente: LDAP anónimo, un share oculto, descompilación de un binario .NET y el AD Recycle Bin, encadenados hasta reutilizar la contraseña de un usuario borrado y comprometer al Administrator.
- active-directory
- ldap
- smb
- winrm
- vnc
- +4
read writeup - Easy
HackTheBox · Windows
EscapeTwo
DC de Active Directory en modo assumed-breach. De unas credenciales iniciales a Domain Admin encadenando fuga de credenciales en un share SMB, abuso de MSSQL con xp_cmdshell, reutilización de contraseñas vía password spraying, abuso de ACL (WriteOwner) y explotación de una plantilla de certificado vulnerable en ADCS (ESC4).
- active-directory
- mssql
- adcs
- esc4
- password-reuse
- +2
read writeup - Easy
HackTheBox · Linux
Headless
XSS reflejado en la cabecera User-Agent para robar la cookie de sesión del administrador, command injection en el panel de admin para RCE, y escalada a root abusando de un script sudo que invoca otro por ruta relativa.
- flask
- xss
- cookie-theft
- command-injection
- sudo
- +1
read writeup
05contact
Let's talk
If you have a role, an internship or a project where a methodical junior keen to learn fits in, reach out. I reply by email or LinkedIn.
- josueeloo@icloud.com
- github
- github.com/Josueviillaa
- linkedin.com/in/josuevillaa