$ robert perez
Entry-level security professional building hands-on experience across offensive testing, blue team detection, and Active Directory attacks. Methodology-focused write-ups with no spoilers, written for beginners and curious recruiters. Currently seeking SOC / security analyst internships and entry-level roles.
Open to internships now · full-time from Jan 2027
Start Here
New here? These writeups show the range best, from a full Active Directory compromise to a cloud-and-endpoint blue team investigation.
-
Active Directory - Full Domain Compromise
Feb 24, 2026
Built and attacked a home-lab Active Directory environment: NTLM dump, Pass-the-Hash, PSExec to SYSTEM, then krbtgt extraction and Golden Ticket forgery for persistent Domain Admin.
Read writeup -
Homelab - LOLBin Attack Chain & Detection
Sep 12, 2026
I built a small Active Directory lab, ran a real attack against a Windows machine, and then caught every step of it in Splunk. This writeup walks through the attack and the detection in plain language.
Read writeup -
BOTSv3 in Splunk - Investigating AWS Breaches, Cryptomining, and an APT
May 21, 2026
The follow-up to BOTSv2. This dataset adds a big AWS component, so the investigation moves between cloud logs and endpoint logs. Notes on what the cloud side taught me.
Read writeup -
Guided Pentest: Web - Chaining Four Small Bugs Into Full Server Compromise
May 21, 2026
A guided web app pentest against a fictional recruitment platform. None of the individual findings are critical. The chain ends in remote code execution and a reverse shell.
Read writeup
Recent Labs
Latest writeups from CTF rooms, vulnerable VMs, and blue team investigations.
-
Vulnerability Scanning with Nmap and Nessus on Metasploitable 2
Sep 27, 2026
A weekend lab running the full vulnerability management cycle against Metasploitable 2. Nmap for discovery, Nessus for scanning, then triage and a report. Non-credentialed found 61 issues. Credentialed found 91.
Read writeup -
Homelab - LOLBin Attack Chain & Detection
Sep 12, 2026
I built a small Active Directory lab, ran a real attack against a Windows machine, and then caught every step of it in Splunk. This writeup walks through the attack and the detection in plain language.
Read writeup -
Attacking IIS - From a Version Banner to a Shell on Windows
Jul 18, 2026
The Windows half of the web server series. Fingerprint IIS, use an old 8.3 filename trick to find hidden files, grab leaked WebDAV creds, and upload an ASPX shell. Every step maps to something attackers still do today.
Read writeup -
Getting Started with Burp Suite - Proxy, Site Map, and a Real XSS
Jul 18, 2026
My first proper walk through Burp Suite: proxy the browser, build a site map that surfaces a hidden endpoint, set a scope to cut noise, and edit a live request to slip an XSS past a client-side filter.
Read writeup -
Web Server Attacks I - Misconfigurations Across Apache, Nginx, Node, and Python
Jul 11, 2026
Four web servers on one host, the same misconfiguration patterns on each: version disclosure, directory listing, exposed status pages, and missing security headers.
Read writeup -
Walking An Application - Manual Web Review with Browser Dev Tools
Jul 11, 2026
A web app review using nothing but the browser. Page source, Inspector, Debugger, Network, and Storage, and why client-side controls are not security.
Read writeup
Skills & Tools
A quick snapshot for recruiters. Full bio and certifications live on the about page.
Offensive Security
Blue Team & Detection
Languages & Platforms
Certifications
B.S. Cybersecurity & Information Assurance, WGU (Dec 2026)