NewCJCA earned, CPTS in progress

Break systems.
Document truth.

I break targets on HackTheBox, then write down exactly how. Looking for my first red-team seat.

Read the writeups About me
certifa.net/writeups
Writeups 9

Easy 6

Kobold

Unauthenticated RCE in MCPJam Inspector, root through the docker group.

LinuxCVE-2026-23744

Starts with a wildcard TLS certificate that leaks a subdomain.

Read the walkthrough
 CCTV

Default credentials, then blind SQL injection in ZoneMinder.

LinuxCVE-2024-51482

Starts with default credentials on an exposed ZoneMinder console.

Read the walkthrough
 Shocker

Shellshock through a CGI script, sudo perl to root.

LinuxCVE-2014-6271

Starts with a CGI script backed by a vulnerable Bash.

Read the walkthrough
 3 more

Medium 1

Gavel

An exposed .git leaks the PHP source, admin panel RCE, then a root-run rule daemon.

Linux

Starts with an exposed .git repository that leaks the PHP source.

Read the walkthrough

Hard 2

DarkZero

MSSQL across two domains, a kernel exploit, then a golden ticket for the forest.

WindowsCVE-2024-30088

Starts with MSSQL lateral movement across two domains.

Read the walkthrough
 Pirate

Pre-Windows 2000 accounts leak a gMSA hash, RBCD to Domain Admin.

WindowsActive Directory

Starts with Pre-Windows 2000 computer accounts.

Read the walkthrough

How it started

It started on a Nintendo DS Lite with an R4 card, a flashcart that ran things Nintendo never approved. Then Minecraft servers, CS:GO cheats, Runescape bots. Different games, same question every time: where is the advantage nobody is using. Eventually I stopped asking that about games.

Project

Aegis

A policy and provenance gateway between an AI agent and its tools. Built with a teammate at the Orion Global 2026 hackathon, running on aegis.certifa.net.

See all projects

Nine machines, written up in full.

Read the writeups

Beyond the platform

Every chain I read about gets rebuilt at home.

The lab

Windows Server 2022 and two workstations. Kerberos, BloodHound paths, NTLM relay, rebuilt outside the platform.

The targets

Active Directory, Linux and web. HackTheBox machines, taken apart and written up in full.

The study

Cybersecurity and Cloud BSc at Hogeschool Utrecht, in progress alongside everything else here.

The goal

A first red-team seat. Internships, CTF teams, or feedback on a writeup.

CJCAHackTheBoxEarned 10 September 2026
CPTSHackTheBoxIn progress
CCNACiscoPlanned

Get in touch

[email protected]

CTF teams, internship leads, or feedback on a writeup. Mail reaches me fastest.