KN Kyler Nats
Domain

Offensive Security

Attacking systems I own so the detections I write aren't guesswork.

I'm not trying to become a pentester. I want to know what an attack looks like from the other side, because that's the difference between a detection rule that works and one that sounds right.

Everything here runs against machines I own or targets built to be broken.

Coursework: graduate Penetration Testing and Ethical Hacking at Eller, including a full penetration test report, plus red team and blue team group engagements.
Published

Work in this area

Offensive Security & Pentesting Lab

A segregated lab for running an attack end to end against a Linux target. Reverse shell through Metasploit to get around egress filtering, a vsFTPd 2.3.4 backdoor for the foothold, then John the Ripper on the shadow file.

Kali · Metasploit · Nmap · John the Ripper

Offensive Security Published
Roadmap

What's next

Listed before it exists so you can tell the difference.

Cloud attack paths

Privilege escalation and lateral movement against a deliberately misconfigured copy of my own Azure builds.

Offensive Security Planned
Purple team loop

Run the attack, write the detection, tune it, document both halves.

Offensive Security Planned
Manual exploitation

Replacing Metasploit modules with my own Python and Bash to cut down the forensic artifacts a framework leaves behind.

Offensive Security Planned