OFFENSIVE SECURITY ENGINEER
Offensive Security Engineer focused on Web/API and Mobile security, building practical security tools, workflows, and methodologies.
I build practical tools, workflows, and methodologies that help offensive security work become more repeatable, useful, and safe for real teams.
Juan Nemiña
Offensive Security Engineer
Focus
Security disciplines and workflows I spend most of my time on.
Selected work
A mix of public projects and sanitized case studies. Public projects link to repositories when available; case studies share only high-level, non-confidential details.
Local-first CLI for sanitizing authorized pentest evidence before reports, tickets, notes, PoCs, or internal sharing.
Windows-based vulnerable lab designed to support controlled offensive security assessment and training scenarios.
Implementation details, source code, and walkthroughs are not publicly available due to confidentiality or release constraints.
Availability: Not public
Credentials
Practical, hands-on certifications that support offensive security and cloud fundamentals.
OffSec Certified Professional
Practical offensive security certification focused on enumeration, exploitation, and privilege escalation.
Junior Penetration Tester
Practical penetration testing fundamentals, methodology, and hands-on security assessment skills.
Microsoft Certified
Cloud fundamentals covering Azure services, identity, security, governance, and cloud concepts.
Notes
Methodology-first writeups and short technical notes.
A Proving Grounds Linux walkthrough covering virtual-host discovery, default control-panel credentials, FTP access to application source code, a hidden environment file exposing reusable credentials, SSH access as spidey, and privilege escalation through a writable systemd service with limited passwordless systemctl permissions.
An exposed rConfig instance was taken over through an administrator password reset, then leveraged through an upload-validation bypass to obtain a shell as apache and escalate through a SUID find binary.
A Proving Grounds Linux walkthrough covering ZoneMinder SQL injection, a MySQL file write into the Apache web root, a reverse shell as www-data, and privilege escalation through a MySQL UDF.
A practical note on organizing private lab practice for OSCP preparation around enumeration, evidence, and lessons that support clearer public writeups.
I'm open to conversations about application security, offensive security, mobile security, security automation, CTFs and labs, and open-source security tooling.