Web · Android · Active Directory Security
0xMoError
Offensive Security Engineer
I specialize in web, Android, and Active Directory penetration testing — focused on high-impact vulnerability discovery and realistic attack simulation.
Focus areas
Explore my research and writeups across the areas I work in.
Web application security research and writeups — injection, access control, business logic, API flaws, and bug bounty.
Android and mobile application security — reverse engineering, APK analysis, WebViews, and mobile attack surfaces.
Red teaming and enterprise security — Active Directory, Azure/Entra ID, Kerberos, ADCS, and identity attacks.
Detection-aware offensive tradecraft — EDR/AV evasion, C2, payload development, and threat emulation.
Technical work
A deep dive into SMB-based lateral movement in Windows — the internals, execution flows, and OPSEC trade-offs of service-based, task-based, and registry-based execution techniques.
Read Writeup