__ __ __ __
/'\__/`\ /\ \ __/\ \ /\ \ __ /\ \
/\ \ _ __ \ \ \/\ \ \ \ \ \ \___ /\_\ ____ \ \ \/'\
\ \ \__\ \ /\`'__\ \ \ \ \ \ \ \ \ \ _ `\ \/\ \ /',__\ \ \ , <
\ \ \_/\ \ \ \ \/ \ \ \_/ \_\ \ \ \ \ \ \ \ \ \ /\__, `\ \ \ \\`\
\ \_\\ \_\ \ \_\ \ `\___x___/ \ \_\ \_\ \ \_\\/\____/ \ \_\ \_\
\/_/ \/_/ \/_/ '\/__//__/ \/_/\/_/ \/_/ \/___/ \/_/\/_/
Penetration Tester · Tool Builder · CTF Player
┌──(mrwhiskers㉿kali)-[~]
└─$ cat about.txt
Role : Penetration Tester @ Jumpsec
Focus : Web Applications · Active Directory · Cloud (AWS/Azure/GCP)
Build Reviews · Mobile · Network Infrastructure
Interests : CTF Competitions · Tool Development · Home Lab · Automation
Home Lab : Proxmox · 100TB+ NAS · Self-hosted services
Notes : Obsidian second brain for pentest methodology & tooling
Status : [ ACTIVE ] — always breaking something, always learning|
🌐 Web Applications OWASP Top 10, API testing, auth bypass, injection, business logic flaws |
🏰 Active Directory Kerberoasting, AS-REP, BloodHound, lateral movement, domain dominance |
☁️ Cloud Security AWS, Azure & GCP assessments, IAM abuse, privilege escalation, misconfigs |
|
🔨 Build Reviews CIS benchmarking, hardening assessments across Windows, Linux & macOS |
📱 Mobile Android & iOS application security testing, traffic interception, binary analysis |
🔧 Tool Development Automation scripts, enumeration tools, report generators |
| Repository | Description | Stack |
|---|---|---|
| 🖥️ System_Enumeration_Scripts | Cross-platform system enumeration for build reviews and pentests. Covers Windows (PowerShell + .bat), Linux, and macOS with severity-rated findings | PowerShell Bash |
| 🌐 Web-Application-Enumeration-Script | Orchestrates common web app tools to run in the background during manual assessment — recon without the manual overhead | Python Bash |
| 🐚 Reverse_Shells | Curated collection of reverse shells for CTFs and authorised engagements — quick reference across languages and protocols | Multi |
| 🐧 Linux_Scripts | Bash scripts for sysadmin automation, Linux management, and general toolkit utilities | Bash |
| 🎙️ Talks | Slides and materials from technical talks delivered at industry events | Markdown |
Languages & Scripting
Security Tooling
Recon & Scanning
Exploitation & Post-Exploitation
Active Directory
Password Attacks
Cloud Security
Mobile
Platforms
Cloud Platforms
Infrastructure & Services
When I'm not breaking things professionally, I'm breaking them at home — running Proxmox, hoarding 100TB+ of data I'll definitely need someday, and cosplaying as a sysadmin with my own VLANs, self-hosted services, and a NAS that has absolutely no business existing in a residential property. It's cheaper than therapy and twice as educational.
┌──(mrwhiskers㉿kali)-[~]
└─$ cat ctf_status.txt
Platform : HackTheBox — Season 10 (Active)
Focus : CVE exploitation, privilege escalation chains,
post-exploitation enumeration techniques
Notes : Documenting techniques → Obsidian methodology base
Goal : Pro Hacker rank & beyond| Platform | Link |
|---|---|
| 🐦 Twitter / X | @SecMrwhiskers |
| Daniel Little | |
| 🏢 Employer | Jumpsec |
| 💬 Stack Overflow | MrWhiskers |
[ All tools and scripts are for authorised security assessments only ]
[ Unauthorised access to computer systems is illegal — use responsibly ]
If any of my repos have been useful — a ⭐ is always appreciated.