pir4cy

Hacker. Builder.
Always curious.

I spend my days digging into offensive security, writing code, and exploring how systems behave when pushed to their limits. Whether it's building tools, chasing bugs, or automating something annoying, I'm always hacking on something.

See What I've BuiltRead My BlogLet's Chat

Technical Expertise

Security Engineering

Expert in incident response, threat analysis, and security operations with proven experience in MDR solutions.

Development & Automation

Building efficient tools and scripts in Python, JavaScript, and Bash to optimize security workflows.

Offensive Security

Experienced in Active Directory, Windows, Linux, and Web application security. Learning through experience.

Security Operations

Proficient in threat intelligence, malware analysis, and security incident management.

Recent Blog Posts

View all posts
eps1.0_hellofriend.mov
Casual

eps1.0_hellofriend.mov

First Blog Post

May 2, 2025
2 min read
HTB: Help
HTBWriteup+3

HTB: Help

Help is an Easy Linux box which has a GraphQL endpoint which can be enumerated get a set of credentials for a HelpDesk software. The software is vulnerable to blind SQL injection which can be exploited to get a password for SSH Login. Alternatively an unauthenticated arbitrary file upload can be exploited to get RCE. Then the kernel is found to be vulnerable and can be exploited to get a root shell.

June 8, 2019
3 min read
HTB: Lightweight
HTBWriteup+4

HTB: Lightweight

Lightweight is a pretty unique and challenging box which showcases the common mistakes made by system administrators and the need for encryption in any kind protocol used. It deals with the abuse of Linux capabilities which can be harmful in bad hands and how unencrypted protocols like LDAP can be sniffed to gain information and credentials.

May 11, 2019
2 min read
HTB: Irked
HTBWriteup+2

HTB: Irked

Irked is a pretty simple and straight-forward box which requires basic enumeration skills. It shows the need to scan all ports on machines and to investigate any out of the place binaries found while enumerating a system.

April 27, 2019
1 min read
HTB: Curling
HTBWriteup+3

HTB: Curling

Curling is an Easy difficulty Linux box which requires a fair amount of enumeration. The password is saved in a file on the web root. The username can be download through a post on the CMS which allows a login. Modifying the php template gives a shell. Finding a hex dump and reversing it gives a user shell. On enumerating running processes a cron is discovered which can be exploited for root.

April 22, 2019
3 min read

Featured Projects

View All Projects

Ready to work together?

Whether you have a specific project in mind or just want to connect, I'm always open to new opportunities and collaborations.

Get in Touch