// Ilias1988
Automating offensive security workflows with AI & Code.
$I have dedicated myself daily to mastering cybersecurity. My journey started on TryHackMe, where over Jan 2025 – Jul 2026 I completed a major part of the platform and reached #2 in Greece and Top 300 globally. I have also completed a major part of PentesterLab. I'm a cybersecurity content creator on YouTube, making videos about hacking, CTFs, and offensive security.
$I'm now leveling up on Hack The Box Academy and Hack The Box Labs, while starting PortSwigger Web Security Academy to deepen my web exploitation skills.
$I specialize in Web Security and Automation. I believe in "vibe coding" — leveraging AI to build custom tools for Red Teaming and CTF challenges.
$My goal is to transition from continuous learning to professional Penetration Testing.
>Ready for the next challenge._
Completed a major part of both TryHackMe and PentesterLab through daily hands-on practice, reaching #2 in Greece and Top 300 globally on TryHackMe. Built a strong foundation in web exploitation, privilege escalation, and network attacks while earning 30+ certifications and badges.
Now leveling up on HackTheBox Academy and HackTheBox Labs — tackling realistic penetration testing machines and structured learning paths. A long road still ahead, and always learning something new.
Starting a focused deep dive into modern web vulnerabilities through hands-on labs, including SQL injection, XSS, SSRF, access control, request smuggling, deserialization, and advanced Burp Suite workflows.
Transitioning from continuous learning to a full-time role in offensive security. Contributing to the cybersecurity community through open-source tools, research, and knowledge sharing.
Reproducible attack paths, controlled research and detection-focused analysis
Hack The Box write-ups
Full attack paths from enumeration and foothold through privilege escalation, including failed paths and lessons learned.
Focused solutions for Web, Pwn, Crypto, Reversing, Forensics and other retired Hack The Box challenges.
Original validation
Controlled experiments connecting offensive techniques with Windows telemetry, forensic artifacts, MITRE ATT&CK mapping and mitigations.
Featured researchSCF Forced NTLM Authentication: Controlled Validation and DetectionResearch blueprintExplore security labs38 Certificates & Badges earned
Live web applications — built for the offensive security community
Multi-language payload obfuscation engine with AMSI bypass, entropy control, and advanced encoding techniques for red team operations.
Interactive reference for 600+ LOLBins (LOLBAS + GTFOBins) with payload builder, MITRE ATT&CK mapping, and real-time search across Windows & Linux.
Generate 90+ reverse shell payloads for Linux & Windows instantly. Features Base64/URL encoding, listener commands, and one-click copy to clipboard.
Web Payload Obfuscator — generate obfuscated payloads to bypass WAFs like Cloudflare, AWS WAF & ModSecurity. Supports SQLi, XSS, CMDi, LFI, SSRF, SSTI & XXE.
Sanitize PII, client infrastructure and secrets in pentest evidence before using public AI — locally, with explainable detection and relationship-preserving pseudonyms.
Built with AI assistance & "Vibe Coding" philosophy
A standalone dark-themed GUI application with 90+ reverse shell payloads for Linux & Windows. Features real-time generation, Base64/URL encoding, and one-click copy.
Advanced news aggregator supporting RSS feeds, Web Scraping & Topic Auto-Discovery via Bing RSS. 30+ international sources with multi-format export (CSV, JSON, HTML).
70+ comprehensive penetration testing cheatsheets. Full MITRE ATT&CK kill chain, Blue Team guides, Cloud Security, Mobile Security, CTF writeups, and more.
Interactive reference for 600+ Living off the Land Binaries (Windows LOLBAS + Linux GTFOBins). Features payload builder, MITRE ATT&CK mapping, and real-time search.
OSINT desktop tool to check if email credentials have been compromised in known data breaches. Modern dark-mode GUI with real-time breach detection and detailed reports.
Multithreaded port scanner with banner grabbing and service detection. Supports common ports, ranges, and full 65535 scans with clean colored output and export.
Web Payload Obfuscator — a Swiss Army Knife for WAF evasion. Generate obfuscated payloads for 7 vulnerability categories (SQLi, XSS, CMDi, LFI, SSRF, SSTI, XXE) with multiple evasion layers.
$ echo "Let's connect!"
Interested in collaborating, discussing cybersecurity, or just want to say hello? Feel free to reach out through any of the platforms below.
$ cat socials.txt