Skip to content
View liamsto's full-sized avatar

Block or report liamsto

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
liamsto/README.md

Hello, I'm Liam.

Here is my PGP public key for my Git email.

About me

I’m an offensive security practitioner, primarily training on Hack The Box (see my profile for stats and progress tracking). On the offensive side my favourites are:

  • AD/LDAP exploitation: BloodHound, Kerberos abuse (AS-REP roasting, Kerberoasting, constrained/unconstrained delegation), ACL/GPO misconfig, certificate service attacks, lateral movement, and privilege escalation in enterprise environments.
  • C2 frameworks: Mythic, Sliver
  • Binary exploitation and RE: vulnerability discovery and exploit development across a wide variety of architectures (mainly AMD64, but also a handful of RISC architectures, mainly ARM and RISC-V), modern mitigations (ASLR, NX, PIE, canaries, RELRO) and bypasses, ROP chaining, and binary debugging and disassembly/RE (pwndbg and Ghidra).
  • Web exploitation: authentication/authorization flaws, injection classes (SQLi/NoSQLi/command injection), SSRF/file inclusion/deserialization, BurpSuite.
  • Wireless and network offensive operations: Wi-Fi security (WPA2/WPA3, rogue AP/evil-twin), internal network service exploitation (SMB/WinRM/RPC/LDAP), and traffic analysis.

On the defensive side:

  • Reverse engineering (Ghidra, mainly): static analysis, function and type recovery, decompilation.
  • Malware and exploit analysis: unpacking, behavioral analysis, finding IOCs and persistence, and mapping to ATT&CK.

I also do some programming in Rust, and a lot of tinkering around with x86, RISC-V, and Raspberry Pis when I get a chance.

HackTheBox Badges

Below are some of the rarest HTB badges I've achieved. I have a lot more, of course, but these are the hardest, most interesting ones I have completed, in no particular order. All these machines and challenges are Insane level difficulty. Click on any of the images to view them on my HTB profile and see the rarities for yourself:

BadgeDescriptionRarity
HTB badge: Completed the Twelve LaboursCompleted the Twelve Labours - owned the Hercules machine0.05% of users
HTB badge: PivoterPivoter - owned the PivotAPI machine0.04% of users
HTB badge: Strategic ThinkerStrategic Thinker - owned the Toby machine0.01% of users
HTB badge: Echoed BackEchoed Back - owned the echoland challenge0.01% of users
HTB badge: Ghost WhispererGhost Whisperer - owned the Ghost machine0.05% of users
HTB badge: One instruction wonderOne instruction wonder - owned the Substandard Optimization challenge0.02% of users

Pinned Loading

  1. js8rsjs8rsPublic

    A Rust JS8 library, with a focus on performance and simplicity.

    Rust

  2. halcyonhalcyonPublic

    A RISC-V kernel written in Rust.

    Rust