I am an Offensive Security Enthusiast specializing in Web, API, and AWS Red Teaming.When I am not hunting for vulnerabilities or exploring cloud security, I am building automated infrastructure and practicing cloud engineering.
- I'm currently learning Red Team Operations and C2 Development
- I participate and blog some CTF Challenges here: dev.to/davidonlinearchive
- I enjoy writing Offensive security tools
- I'm looking to collaborate with Cyber Security Enthusiasts and Hackers
A deliberately vulnerable AWS environment simulating a real-world IAM privilege escalation attack chain via iam:PassRole and lambda:CreateFunction.
Key Features:
- Automated deployment of vulnerable infrastructure using Terraform
- Simulates real-world cloud misconfigurations found in CI/CD pipelines
- Complete attack chain documentation from enumeration to Secrets Manager data exfiltration
Technologies: AWS, Terraform, Python, Pacu, enumerate-iam
Repo: aws-iam-privesc-lab-passrole-lambda
A modular Command and Control (C2) Server in Go using Chi router and SQLite to manage agent registration, task queueing, and implant execution result logging.
Key Features:
- Implemented build-time configuration injection with Go’s template package to bake C2 endpoints and agent settings directly into standalone implant binaries.
- Built an interactive CLI operator console featuring session management, task queues to manage multiple active agents.
Technologies: Go, Chi Router, SQLite, REST APIs
Repo: PRIVATE REPO (Repo visibility to be changed soon)
A web apps enumeration tool designed for rapid discovery of directories using worlists
Key Features:
- Utilizes Go worker pools and goroutines for performant, multi-threaded discovery
- Implemented mutex synchronization to prevent data conflicts across workers
Technologies: Golang, Goroutines, HTTP
Repo: sdirb
