Founder : HACKMINDS | ISC2 Certified in Cybersecurity (CC) 🛡️ SOC Analyst | Pentesting | Ethical Hacker | Web Application Security | Purple Team 💻 #HomeLab
Joined July 2026
- Tweets805
- Following78
- Followers254
- Likes499
Pinned Tweet
Day82 #200daysChallenge with @mr_kay7
🔐 Can I Still Hack It? - VulnBank Home Lab
Today I practiced Privilege Escalation in my authorized VulnBank lab.
🔹 Vertical Privilege Escalation
I inspected a JWT, identified the "isadmin=false" claim, modified it
Day81 #200daysChallenge with @mr_kay7
Completed an authorized Black-Box Penetration Test 🔐
The assessment covered:
• Initial Access
• File Exfiltration
• PDF password cracking to assess exposure of PHI
• Post-Exploitation: testing access to staff salary & shareholder data
Day 100 #200daysChallenge with @mr_kay7
Learning "curl" in Kali Linux 🐉
Today, I learned how to use the "curl" command to interact with websites, send requests, and retrieve responses, including HTML content.
I also practised several useful "curl" options:
Day99 #200daysChallenge with @mr_kay7
In today's Kali Linux command practice during my TechBiz Internship, I learnt something new that I believe will stay with me for as long as ethical hacking and Linux exist. 🐧💻
🔹 "-d" - Sends data in the request body, commonly used for form submissions and POST requests.
🔹 "-e" — Sets the Referer header to a specified URL.
🔹 "-X POST" — Explicitly specifies the HTTP POST method.
Today’s practical session helped me understand what these options
mean and how they work. I am gradually building my confidence in using command-line tools for web application and API testing.
Every day is an opportunity to learn something new, practise it, and become better than I was yesterday! 🚀
#CyberSecurity #EthicalHacking #CTF #Linux
Day99 #200daysChallenge with @mr_kay7
In today's Kali Linux command practice during my TechBiz Internship, I learnt something new that I believe will stay with me for as long as ethical hacking and Linux exist. 🐧💻
🔥 Day 98 of my #200daysChallenge with @mr_kay7
🏆 NETWORKWALKS INTERNSHIP ACHIEVEMENT!
✅ Week 1: 100/100
✅ Week 2: 100/100
✅ Week 3: 100/100
✅ Week 4: 100/100
🎯 Final Internship Exam: 99/100!
I'm grateful for the knowledge gained and the progress made throughout this
another or rename a file. For example:
"mv rents.txt rent.txt"
This renames "rents.txt" to "rent.txt" in the same directory.
These may look like simple commands, but understanding them is another step forward in my Linux and ethical hacking journey.
Every expert starts by mastering the basics, one command at a time.
I'm learning, practising, and growing! 🚀
#200daysChallenge #Linux #KaliLinux #TechBizInternship #EthicalHacking #CyberSecurity
SCRIPTEDWEB retweeted
🔥 Day 98 of my #200daysChallenge with @mr_kay7
🏆 NETWORKWALKS INTERNSHIP ACHIEVEMENT!
✅ Week 1: 100/100
✅ Week 2: 100/100
✅ Week 3: 100/100
✅ Week 4: 100/100
🎯 Final Internship Exam: 99/100!
I'm grateful for the knowledge gained and the progress made throughout this
Day97 #200daysChallenge with @mr_kay7
I successfully completed a PortSwigger Web Security Academy lab on Blind SQL Injection! 🎯
I learned how the SQL SUBSTRING() function can help retrieve an administrator's password one character at a time by testing the application's
🔥 Day 98 of my #200daysChallenge with @mr_kay7
🏆 NETWORKWALKS INTERNSHIP ACHIEVEMENT!
✅ Week 1: 100/100
✅ Week 2: 100/100
✅ Week 3: 100/100
✅ Week 4: 100/100
🎯 Final Internship Exam: 99/100!
I'm grateful for the knowledge gained and the progress made throughout this
Day97 #200daysChallenge with @mr_kay7
I successfully completed a PortSwigger Web Security Academy lab on Blind SQL Injection! 🎯
I learned how the SQL SUBSTRING() function can help retrieve an administrator's password one character at a time by testing the application's
journey. Every challenge is an opportunity to learn, improve, and grow.
I'm not stopping here. More learning, more practice, and more growth ahead! 🚀
#Cybersecurity #Networking #EthicalHacking #CyberJourney
Day97 #200daysChallenge with @mr_kay7
I successfully completed a PortSwigger Web Security Academy lab on Blind SQL Injection! 🎯
I learned how the SQL SUBSTRING() function can help retrieve an administrator's password one character at a time by testing the application's
Day 96 of #200DaysChallenge with @mr_kay7 🚀
Today, I strengthened my networking fundamentals during my TechBiz Security Ethical Hacking Internship.
🔹 IP vs MAC addresses
🔹 The 7 layers of the OSI model
🔹 10 common network ports and their services
🔹 TCP vs UDP
responses to true/false conditions.
Example payload from the lab:
' AND (SELECT SUBSTRING(password,1,1) FROM users WHERE username='administrator')='a
This exercise helped me understand how attackers can infer sensitive information even when an application doesn't
directly display database query results.
Another step forward in my web application security journey! 💪
#CyberSecurity #PortSwigger #SQLInjection #EthicalHacking #WebSecurity #MyCyberJourney
Day 96 of #200DaysChallenge with @mr_kay7 🚀
Today, I strengthened my networking fundamentals during my TechBiz Security Ethical Hacking Internship.
🔹 IP vs MAC addresses
🔹 The 7 layers of the OSI model
🔹 10 common network ports and their services
🔹 TCP vs UDP
Day 95 of #200daysChallenge with @mr_kay7
Today, I took my time to study the three main types of Cross-Site Scripting (XSS): Reflected XSS, Stored XSS, and DOM-based XSS.
🔹 Reflected XSS: This occurs when a website takes malicious input from a request and includes it unsafely
🔹 Practical network configuration using Windows ipconfig and ipconfig /all
I completed TryHackMe's What is Networking? room and documented my practical work.
I'm building my foundation one concept at a time. 🛡️
#CyberSecurity #Networking #EthicalHacking #TryHackMe
Day 95 of #200daysChallenge with @mr_kay7
Today, I took my time to study the three main types of Cross-Site Scripting (XSS): Reflected XSS, Stored XSS, and DOM-based XSS.
🔹 Reflected XSS: This occurs when a website takes malicious input from a request and includes it unsafely
Day 94 #200daysChallenge with @mr_kay7 🚀
I’m excited to begin my new internship role with Techbiz Security as an Ethical Hacker! 🔐
Our first task was to study the CIA Triad, types of hackers, five phases of penetration testing, and the difference between Vulnerability
For example, using innerHTML with untrusted input can introduce this vulnerability.
Today, I learned that the key difference between these three types of XSS is how the malicious input is handled and how it reaches the victim's browser.
I'm taking my time to understand these concepts instead of just memorising them.
One step at a time! 💪
#CyberSecurity #EthicalHacking #WebSecurity #XSS #MyCyberJourney