About

About

Whoami?

Name is collins aliasly known as 0xc4rc3l. I’m a red team trainee and CTF player focused on offensive security, red teaming, and adversary simulation. I learn by breaking systems in controlled environments and documenting how they fail under pressure. My interests sit at the intersection of Active Directory exploitation, post-exploitation tradecraft, and C2 framework design.

Focus Areas

  • Active Directory exploitation & enumeration
  • Privilege escalation & delegation abuse (RBCD, constrained delegation, gMSA, etc.)
  • Red teaming & adversary simulation
  • Command & Control (C2) frameworks (Sliver, Havoc, Adaptix, Mythic)
  • OSINT-based attack simulations
  • Bug bounty research (web exploitation focus)

Experience

  • Hands-on AD lab environments (enterprise-style attack paths, pivoting, credential access chains) at HackTheBox.
  • Multi-stage pivoting scenarios (on-prem → domain → cloud environments in lab setups) at EXtreme Red Team Labs.
  • Red team simulations involving OSINT deception and time-constrained objectives at Cybergameke2026.
  • Building and experimenting with custom tooling concepts for C2 workflows and post-exploitation analysis.
  • Consistent participation in CTFs and security challenges focused on real-world attack modeling

Achievements

  • Successfully completed multi-stage lab environments involving Active Directory compromise and lateral movement
  • Have been able to Bypass some defenses like Windows av and kaspersky av
  • 🥈 Placed 2nd in National Cybersecurity Competition Cybergameke2026

Certifications / Learning Path

  • Preparing for: CPTS and CRTO at the moment.
  • OSCP and hopefully OSEP later.
  • Active study: Active Directory exploitation, red teaming methodologies, and offensive tooling design
  • Continuous learning through labs, CTFs, and self-directed research

Contact