SAMPLE — Authentication race-condition study
A fictional research case used to show an evidence-oriented article layout.
hard
PORTFOLIO / OFFENSIVE SECURITY
Soulaimane
Bouabid.
Penetration testing intern
Preparing for CRTP and writing up HackTheBox machines.
WHAT'S HERE
23 writeups across HackTheBox, VulnLab, and web security.
About
01 / INTRODUCTIONI'm Soulaimane, a penetration testing intern focused on Active Directory and web application security.
I write up what I break, end to end: the path, the commands, and why it worked.
Proof points
02 / VERIFIED FACTSHACKTHEBOXPro Hacker
54 machines owned (Oct 2026)
EDUCATION1337 Coding School
Part of the 42 Network
FINDINGS4 published advisories
3 GHSA, 1 CVE · 2 more CVEs pending
Find me
03 / LINKSExplore the work
04 / SECTIONSLatest posts
05 / NEWEST FIRSTSAMPLE — How I use BloodHound without getting lost
A fictional tool-explainer sample showing the blog's editorial reading style.
easy
Garfield — HackTheBox
Writable logon-script attributes and RBCD led to an RODC KeyList attack and domain admin access.
hard
Pirate — HackTheBox
Weak machine account credentials enabled an internal pivot, NTLM relay, RBCD, and an SPN hijack to domain admin.
hard
Nimbus — HackTheBox
SSRF exposed LocalStack credentials, leading through SQS job execution to a privileged container and host escape.
hard