whoami
I'm Mohamed, a second year cybersecurity student at Alexandria University. I started teaching myself offensive security in August 2025 and my goal is to become a highly-skilled red team operator. Right now I work on Active Directory, C2, binary exploitation and malware development for adversary simulation.
This blog has my writeups for retired HackTheBox machines and Hack Smarter Labs, and a series called Malice where I write up what I learn building tools for adversary simulation.
Latest posts
- Hack Smarter : MillenniumMediumWindows - Active Directory / 2026-11-05A medium difficulty AD box where SMB and LDAP are practically blocked, making most of your usual tools useless.
- Malice : Why Malware Development?pt.00 / 2026-11-01The scope, ground rules and roadmap for the Malice series.
- Hack Smarter : KitsuneEasyWindows - Active Directory / 2026-10-22Easy Active Directory box with ESC13, PowerShell object deserialization and Backup Operators abuse to dump NTDS.
- HTB : CheckpointMediumWindows - Active Directory / 2026-09-11My first ever AD box, featuring two BadSuccessors, a malicious VS extension and extracting TGTs from a memory snapshot.
- Hack Smarter : CasinoMediumLinux / 2026-08-24Casino is a Medium difficulty Linux lab featuring SSTI for RCE, bash history revealing passwords and plaintext root password in logs.