aymane@sec:~$ whoami
Aymane Elouafi
Cybersecurity Engineer
I'm Aymane Elouafi, a cybersecurity engineer interested in both offensive and defensive security — penetration testing, detection engineering, SOC operations and incident response. I like breaking things and catching the people who break things. Lately I've been spending a lot of time on Hack The Box, and this is where I write down what I learn so I don't lose it.
Notes & write-ups
No matching notes.
-
Projects
Cloud-Native SOC on AWS — Purple Teaming & Detection EngineeringMy end-of-year internship project at Devoteam CyberTrust: a cloud-native SOC on AWS — four attack scenarios across the cloud stack, a Wazuh detection engineered for every stage mapped to MITRE ATT&CK, and an experimental AI-augmented triage layer.
-
Projects
Hyper-Converged Proxmox Cluster — Ceph, VXLAN & GrafanaBuilding a 3-node high-availability Proxmox VE cluster from the ground up: Ceph distributed storage, a VXLAN isolated overlay network, Prometheus/Grafana monitoring, and tested HA failover and live migration.
-
Projects
High-Availability Proxmox VE Cluster with Shared NASMy initiation internship at SNRT: designing and deploying a fault-tolerant 2-node Proxmox VE cluster backed by shared NAS storage — covering virtualization, clustering, quorum, the 2-node HA problem, and validation with HA and live-migration tests.
-
Web Attacks
Hacking WordPressEnumerating WordPress (core version, plugins, themes, users), WPScan, exploiting a vulnerable plugin (Mail Masta LFI), brute-forcing logins, and RCE via the theme editor and Metasploit.
-
Footprinting Services
Footprinting IPMIWhat IPMI/BMCs are, scanning UDP 623 with Nmap and Metasploit, default BMC credentials, and dumping + cracking IPMI 2.0 RAKP password hashes with Hashcat.
-
Footprinting Services
Footprinting Oracle TNSOracle TNS and its config files, scanning port 1521, brute-forcing SIDs, enumerating with ODAT, logging in with sqlplus, dumping hashes and file upload to RCE.
-
Footprinting Services
Footprinting MSSQLMicrosoft SQL Server clients and default databases, Windows auth and named pipes, scanning port 1433 with Nmap/Metasploit, and connecting with mssqlclient.py.
-
Footprinting Services
Footprinting MySQLMySQL/MariaDB basics, default config and dangerous settings, scanning port 3306 with Nmap scripts, logging in and navigating databases and tables.
-
Footprinting Services
Footprinting SNMPHow SNMP works (MIB, OIDs, versions and community strings), its plaintext weakness, and footprinting with snmpwalk, onesixtyone and braa.
-
Footprinting Services
Footprinting IMAP / POP3How IMAP and POP3 work and differ, their commands and dangerous settings, scanning ports 110/143/993/995, and talking to them with curl and openssl.
-
Footprinting Services
Footprinting SMTPHow SMTP works and its mail server chain (MUA/MSA/MTA/MDA), clear-text weaknesses, open relays, talking to it over telnet, user enumeration and Nmap scripts.
-
Footprinting Services
Footprinting DNSDNS servers and records, Bind9 config and zone files, dangerous settings, dig queries, AXFR zone transfers and subdomain brute forcing.
-
Cap - HTB WalkthroughEasy Linux box: IDOR to grab a pcap, FTP creds in clear text, SSH as nathan, then root through python3.8 with cap_setuid.
-
Footprinting Services
Footprinting FTPHow FTP and TFTP work, vsFTPd config and dangerous settings, anonymous login, downloading/uploading files and enumerating with Nmap and openssl.
-
Footprinting Services
Footprinting NFSHow NFS works, its dangerous settings, how to enumerate and mount shares, and abusing UID trust with a SUID shell.
-
Network Enumeration with NmapMy notes from the HTB Academy Nmap module: host discovery, port scanning, service enumeration, NSE and firewall evasion.