About me#

I’m Joaquin Rivera, passionate about ethical hacking and offensive security.

This blog is my space to document what I learn: machines, cybersecurity challenges, tools and the techniques I explore along the way.

What will you find here?#

CTF Writeups - Detailed solutions for challenges and machines
Pentesting / Red Team - Offensive techniques, methodologies and tools
Tools & Tutorials - Practical guides on the tools I use every day

My certifications#

CRTP Certified Red Team Professional

COAE Certified Offensive AI Expert

CPTS Certified Penetration Testing Specialist

CWES Certified Web Exploitation Specialist

eWPTX INE / Web Exploitation

eCPPT INE / Penetration Testing

eJPT INE / Junior Penetration Tester

My certification reviews#

Here I share my personal, honest experience with each exam: preparation, real difficulty and final verdict.

CRTP Review - Certified Red Team Professional (Active Directory)
CPTS Review - Certified Penetration Testing Specialist
CWES Review - Certified Web Exploitation Specialist
TryHackMe PT1 Review

Stack / Tools I use#

1
# Reconnaissance
2
nmap, masscan, subfinder, amass, whatweb
3

4
# Web
5
burpsuite, ffuf, sqlmap, nikto, nuclei
6

7
# Post-exploitation
8
metasploit, impacket, bloodhound, mimikatz
9

10
# CTFs
11
pwndbg, ghidra, john, hashcat, cyberchef

Platforms#

You can find me solving challenges on:

“Sic Parvis Magna” - Sir Francis Drake