whoami
Hi, I'm 0xHalfin.
I'm 0xHalfin — a penetration tester and security researcher who learns by breaking things in the lab and writing down exactly how. This site is my public notebook: detailed walkthroughs of retired machines, the methodology behind them, and research I want to share with the community.
Every writeup aims to explain the reasoning, not just the commands — what I noticed, the hypotheses I tested, the dead ends, and what a defender could have done differently.
❯ grep 0xhalfin /etc/passwd 0xhalfin:x:1337:1337:0xHalfin:/home/0xhalfin:/bin/zsh ❯ id uid=1337(0xhalfin) gid=1337(0xhalfin) groups=1337(0xhalfin),27(sudo),4444(red-team) ❯ cat stats.json { "writeups": 1, "platforms": 1, "topics": 8 } ❯
Focus
What I work on
Web exploitation
Auth flaws, injection, SSRF, deserialization and logic bugs.
Active Directory
Enumeration, Kerberos abuse, ACL paths and lateral movement.
Linux & Windows privesc
Misconfigurations, services, scheduled tasks and kernel issues.
Tooling & automation
Small scripts that make recon and exploitation repeatable.
Training grounds
Where I practice
Everything published here targets intentionally vulnerable lab environments and is shared for education. Platform rules are respected — active machines are never published.