Hey there! I'm Sergio, a 24-year-old cybersecurity enthusiast. I've always been passionate about technology, so much so that five years ago I decided to make it my career. I started by earning an associate's degree in Multiplatform Application Development, where I developed multiple desktop and mobile applications using Java
After that, I specialized in pentesting because it's the area I find most fulfilling. I also run a personal blog where I track my progress by publishing write-ups and technical articles about PortSwigger labs, HackTheBox, and my exam prep. So far, I've published over 300 articles while maintaining a regular posting schedule, and completed 90 HackTheBox machines. This year, I plan to earn my CPTS and OSCP certifications
Along the way, I've run into tasks that I find tedious or repetitive. To solve this, I've developed some tools using Bash, Python, and Java to automate them, allowing me to focus on what truly matters
Beyond that, I contribute to the Arch User Repository (AUR) by uploading my own packages, and I build kernel modules when I need to fix hardware issues on my laptop
When it comes to languages, I believe they're essential in this field. That's why I earned my English B2 certificate last year, and I'll start preparing for a French B1 certificate next year
- 🔭 Currently sharpening my pentesting skills
- 💪 I spend my free time at the gym and playing video games
- 💼 Open to job opportunities
- 📫 Find my resume, blog, and socials on Linktree
- ⚡ I love learning and always seek new challenges
Certifications earned:
- BSCP (Burp Suite Certified Practitioner)
- FCE (B2 First Certificate in English)
I'm currently preparing for the following certifications:
- CPTS (Certified Penetration Testing Specialist)
- OSCP (Offensive Security Certified Professional)
- Associate Degree in Multiplatform Application Development - CIFP Carlos III
- Spanish - Native
- English - B2
Here are some of my key projects:
- Justice-Reaper.github.io - My personal blog with PortSwigger and HackTheBox write-ups
- AutoBspwmKali - Script to automate the installation and configuration of a BSPWM environment on Kali Linux
- Diff-Hunter - Burp Suite extension for comparing HTTP requests and responses to identify differences between them
- Sequential-Replacer - Burp Suite extension for sequentially replacing content in HTTP requests using regex patterns and wordlists
- File-Watcher - Detects JavaScript file mutations triggered by browser interactions and shows unified diffs, built for prototype pollution research
- NoSQLI-Attack-Suite - Scripts to enumerate usernames and passwords from web applications vulnerable to NoSQL injection in MongoDB
- rpcEnum - Tool for Active Directory enumeration via the RPC service
- getTopPorts - Extracts the most common ports from Nmap output and copies them to the clipboard
- graphQLConverter - Converts GraphQL JSON to x-www-form-urlencoded format, optimized for use in HTTP requests
- cachebusterGenerator - Generates unique random strings for use as cache busters
- ipRangeGenerator - Generates IP address ranges
- payloadSplitter - Splits large files into smaller chunks with customizable sizes
- wallapopMessagesDownloader - Downloads and saves Wallapop inbox messages using the Wallapop API
- TFG-DAM - Final project for my associate's degree in Multiplatform Application Development
- Hyprland-Artix-Linux-Dotfiles - My Hyprland setup on Artix Linux
- hyprland-minimizer - System tray daemon that lets you minimize applications to the tray on Hyprland
- qylock - Personal fork of qylock, trimmed down to a single custom theme, Pixel Aquarium
