Let me introduce myself. I’m Sergio, 24 years old, and I’ve always been passionate about computers. However, it wasn’t until five years ago that I decided to pursue this field professionally. As a first step, I completed an associate’s degree in Multiplatform Application Development, where I built desktop and mobile applications with Java

Later, I leaned toward offensive cybersecurity because it’s the area I find most fulfilling. I created a personal blog where I share write-ups and articles about PortSwigger labs, HackTheBox, and my exam prep. Currently, I have over 300 published articles and post regularly. I’ve also completed 90 HackTheBox machines. This year, I plan to earn my CPTS and OSCP certifications

Throughout my journey in this field, I’ve encountered tasks that I find tedious or repetitive. To address this, I’ve developed several tools using Bash, Python, and Java to automate them, allowing me to focus on what matters most

Beyond that, I contribute to the Arch User Repository (AUR) by uploading my own packages, something I started doing after compiling a kernel module to fix a microphone bug on my laptop

When it comes to languages, I believe they’re essential in this field. That’s why I earned my English B2 certificate last year, and I’ll start preparing for the C1 next year

About Me 🚀

• 🔭 Currently sharpening my pentesting skills
• 💪 I spend my free time at the gym and playing video games
• 💼 Open to job opportunities
• 📫 Find my resume, blog, and socials on Linktree
• ⚡ I love learning and always seek new challenges

Certifications 🎓

Certifications earned:

• BSCP (Burp Suite Certified Practitioner)
• FCE (B2 First Certificate in English)

I’m currently preparing for the following certifications:

• CPTS (Certified Penetration Testing Specialist)
• OSCP (Offensive Security Certified Professional)

Education 📜

• Associate Degree in Multiplatform Application Development - CIFP Carlos III

Languages 🌍

• Spanish - Native
• English - B2

Featured Projects 🌟

Here are some of my key projects:

• Justice-Reaper.github.io - My personal blog with PortSwigger and HackTheBox write-ups
• AutoBspwmKali - Script to automate the installation and configuration of a BSPWM environment on Kali Linux
• Diff-Hunter - Burp Suite extension for comparing HTTP requests and responses to identify differences between them
• Sequential-Replacer - Burp Suite extension for sequentially replacing content in HTTP requests using regex patterns and wordlists
• File-Watcher - Detects JavaScript file mutations triggered by browser interactions and shows unified diffs, built for prototype pollution research
• NoSQLI-Attack-Suite - Scripts to enumerate usernames and passwords from web applications vulnerable to NoSQL injection in MongoDB
• rpc-enum - Tool for Active Directory enumeration via the RPC service
• get-top-ports - Extracts the most common ports from Nmap output and copies them to the clipboard
• graphql-converter - Converts GraphQL JSON to x-www-form-urlencoded format, optimized for use in HTTP requests
• cachebuster-generator - Generates unique random strings for use as cache busters
• ip-range-generator - Generates IP address ranges
• payload-splitter - Splits large files into smaller chunks with customizable sizes
• wallapop-messages-downloader - Downloads and saves Wallapop inbox messages using the Wallapop API
• TFG-DAM - Final project for my associate’s degree in Multiplatform Application Development
• Hyprland-Artix-Linux-Dotfiles - My Hyprland setup on Artix Linux
• hyprland-minimizer - System tray daemon that lets you minimize applications to the tray on Hyprland
• qylock - Personal fork of qylock, trimmed down to a single custom theme, Pixel Aquarium