https://re4perz3d.github.io/Recent content in Home on Re4perZ3dHugoenSun, 18 Oct 2026 00:00:00 +0000https://re4perz3d.github.io/certs/ecthp/Sun, 18 Oct 2026 00:00:00 +0000https://re4perz3d.github.io/certs/ecthp/A practical threat-hunting certification: proactively searching for intrusions that haven&rsquo;t triggered an alert, using MITRE ATT&amp;CK, network traffic and endpoint telemetry.https://re4perz3d.github.io/writeups/htb-machines/support/Fri, 16 Oct 2026 00:00:00 +0000https://re4perz3d.github.io/writeups/htb-machines/support/A .NET binary leaks an LDAP password, LDAP leaks a user&rsquo;s own password in plaintext, and a GenericAll edge on the DC turns into Domain Admin via Resource-Based Constrained Delegation.https://re4perz3d.github.io/certs/ecir/Sat, 10 Oct 2026 00:00:00 +0000https://re4perz3d.github.io/certs/ecir/A hands-on incident-response certification: detecting, scoping and responding to a live compromise from host and network artifacts, end to end.https://re4perz3d.github.io/cheatsheets/forensics/Thu, 01 Oct 2026 00:00:00 +0000https://re4perz3d.github.io/cheatsheets/forensics/My full DFIR reference: memory, disk, Windows artifacts, Eric Zimmerman tools, log analysis, network forensics, malware triage, steganography and CTF tricks.https://re4perz3d.github.io/cheatsheets/active-directory/Wed, 23 Sep 2026 00:00:00 +0000https://re4perz3d.github.io/cheatsheets/active-directory/Common AD attacks with the command and the log evidence a SOC should look for.https://re4perz3d.github.io/projects/vuln-validation-pipeline/Sat, 15 Aug 2026 00:00:00 +0000https://re4perz3d.github.io/projects/vuln-validation-pipeline/An autonomous pipeline that takes a CVE to an evidence-based verdict — asset matching, reachability, controlled exploitation and Wazuh detection validation, gated by human approval at every trust boundary.https://re4perz3d.github.io/certs/crtp/Wed, 01 Jul 2026 00:00:00 +0000https://re4perz3d.github.io/certs/crtp/Hands-on Active Directory attack and defense: enumeration, privilege escalation, persistence and abusing trusts across a multi-domain forest.https://re4perz3d.github.io/writeups/cybertek/operation-ghostvein/Fri, 29 May 2026 00:00:00 +0000https://re4perz3d.github.io/writeups/cybertek/operation-ghostvein/A Linux DFIR challenge I authored: reconstructing an OFBiz exploitation, PAM backdoor, SSH pivot and DNS exfiltration from host artifacts and PCAPs.https://re4perz3d.github.io/certs/ecpptv3/Thu, 15 Jan 2026 00:00:00 +0000https://re4perz3d.github.io/certs/ecpptv3/A practical penetration-testing certification covering network and host exploitation, privilege escalation, pivoting and Active Directory attacks.https://re4perz3d.github.io/writeups/securinets-beginner-ctf-2025/intro-to-volatility/Mon, 10 Nov 2025 00:00:00 +0000https://re4perz3d.github.io/writeups/securinets-beginner-ctf-2025/intro-to-volatility/Windows memory forensics with Volatility 3: extracting system info, spotting malicious activity and recovering a file hash from a memory dump.https://re4perz3d.github.io/writeups/securinets-beginner-ctf-2025/obfuscated/Mon, 10 Nov 2025 00:00:00 +0000https://re4perz3d.github.io/writeups/securinets-beginner-ctf-2025/obfuscated/Network forensics: extracting an obfuscated JavaScript file from HTTP traffic, deobfuscating it and decoding a reversed Base64 flag.https://re4perz3d.github.io/writeups/securinets-beginner-ctf-2025/punkvania/Mon, 10 Nov 2025 00:00:00 +0000https://re4perz3d.github.io/writeups/securinets-beginner-ctf-2025/punkvania/A phishing campaign investigation: a fake indie-game landing page used as a lure, worked through indicator extraction and attribution.https://re4perz3d.github.io/writeups/securinets-beginner-ctf-2025/red-penguin/Mon, 10 Nov 2025 00:00:00 +0000https://re4perz3d.github.io/writeups/securinets-beginner-ctf-2025/red-penguin/Threat intelligence questions on the RedPenguin cyber-espionage campaign, mapped against the MITRE ATT&amp;CK framework.https://re4perz3d.github.io/writeups/securinets-beginner-ctf-2025/solarwinds-campaign/Mon, 10 Nov 2025 00:00:00 +0000https://re4perz3d.github.io/writeups/securinets-beginner-ctf-2025/solarwinds-campaign/Investigating a suspicious email tied to the SolarWinds campaign: uncovering TTPs and indicators of compromise as a threat intel analyst.https://re4perz3d.github.io/writeups/securinets-beginner-ctf-2025/vigenere/Mon, 10 Nov 2025 00:00:00 +0000https://re4perz3d.github.io/writeups/securinets-beginner-ctf-2025/vigenere/A classical-cipher challenge: a known-plaintext attack on a Vigenère-encrypted flag to recover the key and decrypt the message.https://re4perz3d.github.io/certs/ejptv3/Wed, 15 Oct 2025 00:00:00 +0000https://re4perz3d.github.io/certs/ejptv3/My first hands-on offensive certification: network enumeration, vulnerability assessment and exploitation fundamentals.https://re4perz3d.github.io/articles/cyber-threat-intelligence/Tue, 15 Jul 2025 00:00:00 +0000https://re4perz3d.github.io/articles/cyber-threat-intelligence/A beginner&rsquo;s guide to CTI from someone learning the field: what it is, the four intelligence types, the CTI lifecycle, and the frameworks that tie it together — ATT&amp;CK, the kill chains, the Diamond Model and ENISA&rsquo;s 2024 landscape.https://re4perz3d.github.io/projects/soc-threat-intel-platform/Mon, 30 Jun 2025 00:00:00 +0000https://re4perz3d.github.io/projects/soc-threat-intel-platform/An open-source SOC that automates alert-to-context: Wazuh, Shuffle and OpenCTI wired together, with AI-generated incident reports surfaced in a custom Next.js dashboard I built.https://re4perz3d.github.io/writeups/cyberspark-ctf/arcane-door/Sun, 18 May 2025 00:00:00 +0000https://re4perz3d.github.io/writeups/cyberspark-ctf/arcane-door/A beginner CTI challenge on the real-world ArcaneDoor APT campaign: TTPs, malicious software and exploited CVEs via MITRE ATT&amp;CK.https://re4perz3d.github.io/writeups/cyberspark-ctf/backdoor/Sun, 18 May 2025 00:00:00 +0000https://re4perz3d.github.io/writeups/cyberspark-ctf/backdoor/Analyzing SSH logs to uncover unauthorized access and a malware persistence mechanism.https://re4perz3d.github.io/writeups/cyberspark-ctf/discord-bot/Sun, 18 May 2025 00:00:00 +0000https://re4perz3d.github.io/writeups/cyberspark-ctf/discord-bot/A misc challenge on Discord bot logic and permissions, manipulating bot behaviour to satisfy the flag conditions.https://re4perz3d.github.io/writeups/cyberspark-ctf/hello/Sun, 18 May 2025 00:00:00 +0000https://re4perz3d.github.io/writeups/cyberspark-ctf/hello/Network forensics and password cracking: recovering an encrypted PDF shared over FTP and extracting the hidden flag.https://re4perz3d.github.io/writeups/cyberspark-ctf/magic-bytes/Sun, 18 May 2025 00:00:00 +0000https://re4perz3d.github.io/writeups/cyberspark-ctf/magic-bytes/Steganography and file-repair: image metadata analysis, extracting embedded content and fixing a corrupted JPEG.https://re4perz3d.github.io/writeups/htb-sherlocks/teamwork/Thu, 10 Apr 2025 00:00:00 +0000https://re4perz3d.github.io/writeups/htb-sherlocks/teamwork/A phishing-to-supply-chain-attack investigation: tracing a fake NFT game pitch from a North Korean threat actor (Moonstone Sleet) through a trojanized PuTTY and a malicious npm package.https://re4perz3d.github.io/whoami/Mon, 01 Jan 0001 00:00:00 +0000https://re4perz3d.github.io/whoami/<p>I&rsquo;m <strong>Mohamed Bayrem Bane</strong> (Re4perZ3d), a SOC analyst based in Tunisia with a strong offensive-security side.</p> <p>I work on both ends of an attack: I triage and investigate alerts in Microsoft Sentinel, Defender XDR and Elastic, and I train on Active Directory attacks, exploitation and privilege escalation in labs. The bridge between the two — attack → detect → validate → improve — is where I want to specialise.</p> <h2 id="now">Now</h2> <ul> <li>SOC Analyst L1 at <strong>Raise Guard</strong> (since November 2025)</li> <li>Engineering student in Computer Networks and Security at <strong>TEK-UP</strong> (started 2025, graduating 2028)</li> <li>Tech team member at <strong>Securinets TEK-UP</strong>, writing forensics and network challenges and running workshops</li> </ul> <h2 id="path">Path</h2> <table> <thead> <tr> <th>When</th> <th>What</th> </tr> </thead> <tbody> <tr> <td>2022 – 2025</td> <td>Bachelor in Computer Networks / Network Security, ISETCOM (high honors)</td> </tr> <tr> <td>2025</td> <td>Final-year project at ANCS: open-source SOC with Wazuh, OpenCTI, Shuffle and AI-assisted reporting</td> </tr> <tr> <td>2025 →</td> <td>SOC Analyst at Raise Guard</td> </tr> <tr> <td>2025 – 2028</td> <td>Engineering degree at TEK-UP (in progress)</td> </tr> </tbody> </table> <h2 id="certifications">Certifications</h2> <p>eCTHP · eCIR · CRTP · eCPPTv3 · eJPTv3</p>