Skip to content
View hunntr's full-sized avatar
⛈️
⛈️

Highlights

  • Pro

Block or report hunntr

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
hunntr/README.md

About Me

I'm a 1st year cybersecurity student, located in France, specialized in Linux, Web, and Windows/AD penetration testing. I enjoy continuously learning and working on offensive security challenges.

Certifications

Main Skills

  • Web Pentesting: Identifying design and implementation flaws in web applications and APIs, from access control issues to protocol misuse.
  • Windows/AD Pentesting: Enumerating and attacking Active Directory environments with BloodHound and LDAP, exploiting Kerberos (Kerberoasting, AS-REP roasting), NTLM relay, pass-the-hash/pass-the-ticket, and privilege escalation via misconfigured services, ACLs and GPOs.
  • Linux Pentesting: Enumerating and exploiting Linux systems and services, privilege escalation through misconfigurations, weak permissions, cron jobs and SUID binaries, and general system hardening.
  • LLM/AI Pentesting: Assessing the security of Large Language Models and AI applications, including prompt injection, jailbreaks, indirect prompt injection, agent exploitation, tool abuse, and AI-specific attack surfaces.
  • Reverse/Pwn: Low-level knowledge in C, C++ and ASM, understanding compilation internals and how to reverse code.
  • Forensics: Analyzing artifacts, memory dumps, logs and file systems to reconstruct what happened and how.

Projects

  • trustbin: Offensive security tools recompiled directly from their official upstream source through a public, auditable CI pipeline. Every binary ships with a checksum and a signed build provenance attestation, so instead of trusting a random .exe from a forum or a Discord server, you can verify exactly what source it came from and how it was built.

Pinned Loading

  1. trustbin trustbin Public

    Offensive security tools, built from source and hash verified with public CI and build provenance attestations. No mystery binaries.

    Python 4

  2. w3env w3env Public

    Manage Web3 environment profiles - switch between RPC URLs, contract addresses and private keys instantly.

    Go 6