Certified, Hired, and Recharged - A Life Update
It's been quite a while since my last post, and this time the silence was actually a deliberate
// case file: Zero Day
Access granted.
Access granted.
Operating as root.
Notes from the field on offensive security, CTFs, and the long way round to understanding how systems actually break. Subscribe at y0u4r3@h4ck3d.com - yes, that's real.
01 / Dossier
Who am I
Welcome to my cybersecurity journey. I'm an aspiring IT professional with a passion for understanding and securing technology - my path runs from system integration through offensive security and ethical hacking.
Right now: sharpening penetration testing and ethical hacking skills through hands-on practice - TryHackMe rooms, Wireshark, Burp Suite, and a growing scripting toolkit.
02 / Timeline
My Journey
Every great journey begins with a single step - mine was choosing to dive into IT and cybersecurity.
Start
IT Apprenticeship
Started a professional IT apprenticeship - the foundation everything else was built on.
Building
Building the Foundation
Homelab, networking, and system administration fundamentals - laying the groundwork before going offensive.
Going Offensive
Into Offensive Security
CTFs, Active Directory attack paths, and web app pentesting - learning to think like an attacker.
Mid 2026
Finals & a Necessary Break
Apprenticeship finals, written exams, and a final project - followed by a month completely offline to recover.
Aug 2026
Certified, Hired, and Recharged
Finished the apprenticeship, landed a role, and came back recharged - still documenting the whole way.
03 / Roadmap
Learning Path
Resources, strategies, and milestones that have shaped my growth.
Foundations
Networking & Systems
Homelab builds, Hyper-V, and Windows Server deployments - the infrastructure behind everything else.
Foundations
Core Tools
Wireshark, Burp Suite, and scripting fundamentals for repeatable workflows.
Certification
ITIL Foundation
IT service management certification - the process side of the job.
Specialization
Active Directory Attacks
Kerberoasting, SMB relay, and privilege escalation across Windows environments.
Specialization
Web Application Security
SQL injection, XSS, and real-world exploitation through CTF rooms.
Specialization
Wireless & Hardware
WiFi Pineapple and Flipper Zero - offensive security beyond the keyboard.
Next
Formal OSCP-track Certification
Working toward a recognized offensive security certification.
04 / Log
Insights
Personal reflections and thoughts along the way - not writeups, just what's on my mind.
Back Again - A Small Life Update
It’s been quite a while since my last post, and I figured it was finally time to sit down
Project Approved: Building the Foundation
My final project topic has officially been approved by the Chamber of Commerce and Industry. The project, titled “Introduction of
Current Situation, Priorities, and Project Progress
Over the past weeks, my learning routine has changed noticeably. While I am still highly interested in continuous hands-on
Between Exams and Experience
On October 25th, I received my results for the intermediate examination (AP1). To be honest, I hadn’t expected much,
Back on Track: A Quick Life & Learning Update
After quite a break, I’m finally back and ready to get more active here again. The past few months
Pushing Through - ITIL Certified and What Comes Next
Lately things have been moving fast. I’m currently deep in a demanding learning phase, and time is tight. With
Exploring Network Operations and Security in Depth
In the latest phase of my retraining to become an IT specialist in system integration, we are diving into a
My Cybersecurity Certifications and Future Goals
As I continue my journey in cybersecurity, acquiring certifications has been a key part of my learning process. Certifications not
Who am I
Hi, I’m z9rr9 I’m currently on a two-year journey, training as an IT Specialist for System Integration.
Welcome to My Cybersecurity Journey
From zero to now - this is my story. Join me as I share my beginnings, challenges, and progress in the
05 / Reference
Methodologies
Penetration testing frameworks like OWASP and NIST, plus personal workflows developed through trial and error.
WEB-01
OWASP Testing Guide
Structured framework for identifying and validating web application vulnerabilities.
AD-02
Active Directory Attack Path Mapping
Enumeration, Kerberoasting, and SMB relay - tracing the path from foothold to domain admin.
OPS-03
Personal Workflow
A trial-and-error-tested process for analyzing a system end-to-end for vulnerabilities.
PE-04
Privilege Escalation Methodology
Systematic checks across Windows and Linux - from misconfigurations to kernel exploits.
06 / Writeups
Challenges
The journey into cybersecurity is anything but straightforward - it's a constant cycle of learning, experimenting, and overcoming hurdles. Here are some of the significant challenges I've faced, how I approached them, and what I learned.
Relevant - Chaining SMB, IIS and Token Impersonation into SYSTEM
Windows environments are rarely compromised through a single vulnerability alone. In most real world scenarios, attackers chain together several smaller
Corp Walkthrough - Kerberoasting
This room focuses on several common techniques used during Windows and Active Directory security assessments. The objective is to move
Chained Exploitation on lookup.thm: Web Vuln - SUID - Sudo Bypass
This is a complete walkthrough of the lookup.thm machine, showcasing all stages from reconnaissance to privilege escalation. The box
Simple CTF - Full Walkthrough
This post covers my full approach to the TryHackMe box Simple CTF, a beginner-friendly machine that turned out to
Getting Back Into the Flow: A Full Walkthrough of "Skynet"
I haven’t touched TryHackMe or done any structured CTF work in quite a while, so I figured it was
Hacking the Game Zone - SQLi, SSH Tunnels, and Root Access
The TryHackMe room Game Zone was a great opportunity to revisit some fundamental offensive techniques in a very streamlined and
Full Compromise of HackPark
The HackPark room on TryHackMe is a well-structured Windows-based lab that walks through multiple real-world attack techniques:
From Web Exploitation to Offensive Operations
After completing the Web Penetration Testing path, I was more than ready for a shift in focus. The Web module
Exploiting Stored XSS to Hijack an Admin Session
This write-up covers the exploitation process of a client-side vulnerability in the TryHackMe room What's Your
Web Application Pentesting - Exploiting the Modern Web
Over the past few weeks, I’ve worked through the Web Application Pentesting learning path on TryHackMe, a course that
Learning Web Application Pentesting
Currently, in my retraining as an IT specialist for system integration, the official topic is Windows 10. Why, I honestly
Windows Privilege Escalation: A Deep Dive into Gaining Higher Access
Privilege escalation is one of the most crucial phases in penetration testing and red teaming. Gaining initial access to a
Linux Privilege Escalation: Understanding & Exploiting Weaknesses
Privilege escalation is a fundamental step in penetration testing and ethical hacking. Once an attacker gains a foothold on a
Mastering Burp Suite: Web Security Testing & Real-World Exploits
Introduction As I continue my deep dive into penetration testing and offensive security, I've been focusing on mastering
07 / Build Log
Projects
This section is dedicated to the projects that have shaped my journey - and the ones I'm excited to bring to life next. Hands-on builds, real-world application, stepping stones along the way.
Building a Personal Red Teaming Knowledge Base on GitHub
Alongside my main responsibilities, especially exam preparation and other ongoing commitments, I am currently working on a small side project
Red-Team Homelab - Complete Technical Documentation
This blog post documents the current, fully working state of a multi-segment Red-Team homelab. The focus of this
Evaluating Open-Xchange as an On-Premise Groupware Alternative
This project is part of my current work within the company and is something I am working on alongside my
Migrating My Ghost Blog from Raspberry Pi to a VPS: A Step Toward Stability
For several weeks, my personal blog was proudly running on a Raspberry Pi 5. It was more than just a
From Hardware to HTTPS: Building My Personal Cybersecurity Blog from Scratch
Creating my personal website has been a challenging, educational, and ultimately rewarding experience. What began as a straightforward goal, documenting
WiFi Pineapple Mark VII - Expanding the Workflow with Automation and Device Profiling
As I continued working with the WiFi Pineapple, I wanted to bring my lab environment to a much more structured
WiFi Pineapple Mark VII - My Introduction to WiFi Pentesting
Right now, I am diving deep into the world of WiFi pentesting, and for that, I got myself the Hak5
Project: HAK5 WiFi Pineapple Mark VII + AC Tactical Kit - First Exploration
Today marks the arrival of an exciting addition to my lab: the WiFi Pineapple Mark VII, bundled with the AC
Setting Up a Complete Windows Server Deployment with Hyper-V
Introduction In this blog post, I will walk you through the process of setting up a Windows Server deployment using
Building My Virtual Lab: Setting Up a Hyper-V Server with Automated VM Deployment
As part of my journey to becoming an IT specialist in system integration and diving deeper into cybersecurity, I recently
Exploring the Flipper Zero and Dev Board: A Deep Dive into My Projects
As part of my ongoing journey into cybersecurity and hands-on experimentation, I decided to invest in a Flipper Zero