A documented record of hands-on penetration testing work: methodology-driven write-ups covering Active Directory exploitation, web application security, and red team infrastructure, built to reflect real-world engagement standards, not just CTF completions.
Author: MD JUBAIR HOSSAIN · Penetration Tester
Portfolio: Medium · LinkedIn · TryHackMe
Focus areas: Active Directory Security · Web Application Pentesting · Red Team Infrastructure (C2) · Vulnerability Chaining
Certifications validate knowledge; this repo validates application. Every write-up here follows a consistent, engagement-style methodology , recon, exploitation, impact, and remediation — the same structure expected in a professional penetration test report. This is meant to demonstrate readiness for practical, exam-style assessments (e.g., CPENT) as much as it documents a learning path.
| Writeup | What it covers |
|---|---|
| Lateral Movement and Pivoting | Hands-on lab work covering lateral movement across compromised hosts and network pivoting techniques - practically executed using tools like Impacket, CrackMapExec, and Chisel/Ligolo for tunneling into segmented networks, with each technique tested and documented step-by-step in a controlled environment. |
| Exploiting Active Directory | Hands-on lab work completed on TryHackMe, covering practical exploitation of Active Directory environments - enumeration, attack path identification, and privilege escalation executed and documented step-by-step in a guided lab setting. |
| Active Directory Exploitation Notes | Structured walkthrough connecting enumeration, lateral movement, and privilege escalation techniques into a single attack chain. |
| Active Directory CVE Exploitation | Writeups covering exploitation of known CVEs affecting Active Directory environments - walking through vulnerability identification, proof-of-concept exploitation, and the underlying misconfiguration or patch gap that made each CVE exploitable, along with remediation guidance. |
| Active Directory Persistence | Techniques for maintaining long-term access in a compromised AD environment - covering methods like Golden/Silver Ticket abuse, DCSync, and AdminSDHolder manipulation, along with detection and remediation notes.Underlying misconfiguration or patch gap that made each CVE exploitable, along with remediation guidance. |
| Writeup | What it covers |
|---|---|
| Privilege Escalation | Hands-on notes on escalating privileges after initial access - covering misconfiguration abuse, kernel exploits, service/permission weaknesses, and credential harvesting, documented step-by-step from low-privilege foothold to full system/domain compromise. |
| Writeup | What it covers |
|---|---|
| Web Application Pentest | Methodology and findings from web application penetration testing exercises, including vulnerability identification and exploitation. |
| Writeup | What it covers |
|---|---|
| Adaptix C2 Framework | Building and configuring a C2 framework in an isolated lab, understanding listener/agent architecture relevant to red team infrastructure. |
| Initial Access | Hands-on notes on gaining initial foothold in target environments - covering common entry vectors like exposed services, weak credentials, phishing simulation payloads, and public exploit adaptation, documented step-by-step from recon through first shell |
- Scope & Objective — target, environment, and goal
- Reconnaissance & Enumeration — tooling, service discovery, attack surface mapping
- Exploitation — step-by-step technical execution with reasoning, not just commands
- Privilege Escalation / Lateral Movement (where applicable)
- Impact — what access or data exposure the chain achieves
- Remediation — concrete, actionable fixes a defender would implement
- Lessons Learned / Notes for future engagements
This mirrors the recon → exploitation → reporting structure used in real penetration test engagements and practical certification exams.
BloodHound CE · Nmap · Burp Suite · Impacket · CrackMapExec · Mimikatz · AdaptixC2 · Docker (lab environments)
- Setup guides and technical deep dives are also published on Medium, including BloodHound CE deployment on Kali via Docker and AdaptixC2 configuration.
- Active on TryHackMe, working through Active Directory and red team learning paths.
All work documented here was performed in authorized lab environments, CTF platforms (TryHackMe, HackTheBox), or self-hosted infrastructure built specifically for this purpose. Nothing in this repository reflects unauthorized access to third-party systems.
📫 Contact: LinkedIn