0xM4IX

About Me

Mon, 01 Jan 0001 00:00:00 +0000

Offensive Security • Penetration Testing • Vulnerability Research

I’m 0xM4IX, a penetration tester from Uzbekistan and a former software engineer with a primary focus on offensive security, Active Directory, web application security, and internal network assessments.

My background in software engineering has given me a strong understanding of how applications are built, while my current focus is on identifying, analyzing, and exploiting security weaknesses through hands-on practice and continuous research.

Hack The Box - Active - Writeup

Mon, 01 Jan 0001 00:00:00 +0000

Abusing Group Policy Preferences credentials and Kerberoasting to compromise an Active Directory domain on Hack The Box Active.

Hack The Box - Blackfield - Writeup

Mon, 01 Jan 0001 00:00:00 +0000

Anonymous SMB enumeration, AS-REP Roasting, ForceChangePassword abuse, LSASS credential extraction, Backup Operators abuse, and privilege escalation on Hack The Box Blackfield.

Hack The Box - Forest - Writeup

Mon, 01 Jan 0001 00:00:00 +0000

Anonymous RPC enumeration, AS-REP Roasting, BloodHound privilege analysis, ACL abuse, and DCSync exploitation on HackTheBox Forest.

Hack The Box - Lame - Writeup

Mon, 01 Jan 0001 00:00:00 +0000

Linux service enumeration and exploitation of vulnerable Samba services on Hack The Box Lame.

Hack The Box - Querier - Writeup

Mon, 01 Jan 0001 00:00:00 +0000

Abusing exposed SMB shares, MSSQL credentials, NTLM capture, and credential discovery to compromise Querier.

Hack The Box - Resolute - Writeup

Mon, 01 Jan 0001 00:00:00 +0000

Active Directory enumeration, password spraying, WinRM access, PowerShell transcript credential discovery, and DnsAdmins privilege escalation on Hack The Box Resolute.

My CPTS Exam Experience (2 Attempts)

Mon, 01 Jan 0001 00:00:00 +0000

My journey through the Certified Penetration Testing Specialist (CPTS) exam, including lessons learned from two attempts and what ultimately helped me succeed.