Ilias Georgopoulos

<About Me/>

about_me.sh

$I have dedicated myself daily to mastering cybersecurity. My journey started on TryHackMe, where over Jan 2025 – Jul 2026 I completed a major part of the platform and reached #2 in Greece and Top 300 globally. I have also completed a major part of PentesterLab. I'm a cybersecurity content creator on YouTube, making videos about hacking, CTFs, and offensive security.

$I'm now leveling up on Hack The Box Academy and Hack The Box Labs, while starting PortSwigger Web Security Academy to deepen my web exploitation skills.

$I specialize in Web Security and Automation. I believe in "vibe coding" — leveraging AI to build custom tools for Red Teaming and CTF challenges.

$My goal is to transition from continuous learning to professional Penetration Testing.

>Ready for the next challenge._

<Tech Stack/>

Languages

PythonBashJavaScriptHTML/CSSPowerShellSQL

Offensive Security

Web App PentestingNetwork PentestingCTF ChallengesOWASP Top 10Reverse ShellsPrivilege Escalation

Tools

Burp SuiteNmapMetasploitSQLMapGobusterWiresharkHashcatHydra

AI & Automation

AI-Assisted DevelopmentCustom Tool BuildingWorkflow AutomationWeb ScrapingOSINT Automation

Platforms

Kali LinuxWindowsGit / GitHubDockerVS Code

<The Roadmap/>

Completed · Jan 2025 – Jul 2026

TryHackMe & PentesterLab Foundations

Completed a major part of both TryHackMe and PentesterLab through daily hands-on practice, reaching #2 in Greece and Top 300 globally on TryHackMe. Built a strong foundation in web exploitation, privilege escalation, and network attacks while earning 30+ certifications and badges.

#2 in GreeceTop 300 GlobalWeb SecurityLinux & Windows PrivEscCTF

Active Now

HackTheBox Academy & Labs

Now leveling up on HackTheBox Academy and HackTheBox Labs — tackling realistic penetration testing machines and structured learning paths. A long road still ahead, and always learning something new.

HTB AcademyHTB LabsActive MachinesCPTS Path

Started · Sep 2026

PortSwigger Web Security Academy

Starting a focused deep dive into modern web vulnerabilities through hands-on labs, including SQL injection, XSS, SSRF, access control, request smuggling, deserialization, and advanced Burp Suite workflows.

Web Security AcademyBurp SuiteAdvanced WebHands-on Labs

Goal

Professional Penetration Tester

Transitioning from continuous learning to a full-time role in offensive security. Contributing to the cybersecurity community through open-source tools, research, and knowledge sharing.

Red TeamBug BountyOpen Source

<Technical Knowledge Base/>

Reproducible attack paths, controlled research and detection-focused analysis

30 published

Hack The Box write-ups

Category 1 / 4

Machines

Full attack paths from enumeration and foothold through privilege escalation, including failed paths and lessons learned.

Latest machines write-upHack The Box — Timelapse

Explore machines

1 / 4

6 published

Original validation

Security Research & Labs

Controlled experiments connecting offensive techniques with Windows telemetry, forensic artifacts, MITRE ATT&CK mapping and mitigations.

Featured researchSCF Forced NTLM Authentication: Controlled Validation and DetectionResearch blueprint Explore security labs

3 published findings

Authorized & sanitized disclosure

Bug Bounty

Latest reports from authorized security research, presented without target names, private identifiers or authentication material.

Latest finding 1 / 3

Authenticated SMTP Test Function Exposes a Private-Network TCP Oracle

A sanitized report showing how an authenticated SMTP test feature exposed loopback and RFC1918 connection states through timing and error-class differences.

Low · Duplicate — ClosedSanitized technical reportBlind SSRF / SMTP reachability oracleEvidence, impact, remediation and final outcome Read this finding

View all findings1 / 3

<Certifications/>

42 Certificates & Badges earned

Pre Security

Intro to Cyber Security

Complete Beginner

Junior Pentesting

Offensive Pentesting

CompTIA Pentest+

Web App Pentesting

Red Teaming

SOC Level 1

SOC Level 2

Security Engineer

DevSecOps

Attacking & Defending AWS

Cyber Advent 2025

Advanced Endpoint Investigations

Web Application Red Teaming

AI Security

PTLA1362

PTLB1529

PTLC0337

PTLE7397

PTLG0449

PTLH2392

PTLI1077

PTLK0031

PTLN27407

PTLO0434

PTLP5618

PTLS3280

PTLT0183

PTLY2033

PTLR3122

PTLAPI0095

PTLX0334

Web

Media (PTLM0006)

Hades (Mini Pro Lab)

P.O.O. (Mini Pro Lab)

Hack The Box Mini Pro Lab - Xen certificate

Xen (Mini Pro Lab)

FullHouse (Mini Pro Lab)

Mythical (Pro Lab)

Puppet (Pro Lab)

<Featured Security Tools/>

Live web applications — built for the offensive security community

payload-obfuscator.dev

Payload Obfuscator

Multi-language payload obfuscation engine with AMSI bypass, entropy control, and advanced encoding techniques for red team operations.

JavaScriptViteTailwind CSSRed Team

Visit Website

livingofftheland.dev

LOL Reference

Living Off the Land

Interactive reference for 600+ LOLBins (LOLBAS + GTFOBins) with payload builder, MITRE ATT&CK mapping, and real-time search across Windows & Linux.

JavaScriptHTML/CSSPythonMITRE

Visit Website

shellgenerator.dev

Shell Generator

Reverse Shell Generator

Generate 90+ reverse shell payloads for Linux & Windows instantly. Features Base64/URL encoding, listener commands, and one-click copy to clipboard.

JavaScriptViteTailwind CSS

Visit Website

waf-bypass.dev

WAF Bypass Toolkit

Web Payload Obfuscator — generate obfuscated payloads to bypass WAFs like Cloudflare, AWS WAF & ModSecurity. Supports SQLi, XSS, CMDi, LFI, SSRF, SSTI & XXE.

ReactViteTailwind CSS

Visit Website

ilias1988.github.io/targetveil/

TargetVeil

Sanitize PII, client infrastructure and secrets in pentest evidence before using public AI — locally, with explainable detection and relationship-preserving pseudonyms.

JavaScriptPythonPrivacyOffline

Visit Website

<Projects/>

Built with AI assistance & "Vibe Coding" philosophy

Reverse Shell Generator

A standalone dark-themed GUI application with 90+ reverse shell payloads for Linux & Windows. Features real-time generation, Base64/URL encoding, and one-click copy.

PythonCustomTkinterRed Team

Cyber News Scraper

Advanced news aggregator supporting RSS feeds, Web Scraping & Topic Auto-Discovery via Bing RSS. 30+ international sources with multi-format export (CSV, JSON, HTML).

PythonWeb ScrapingOSINT

Hacking Cheatsheets

70+ comprehensive penetration testing cheatsheets. Full MITRE ATT&CK kill chain, Blue Team guides, Cloud Security, Mobile Security, CTF writeups, and more.

MarkdownDocumentationEducation

LOLBins Reference

Interactive reference for 600+ Living off the Land Binaries (Windows LOLBAS + Linux GTFOBins). Features payload builder, MITRE ATT&CK mapping, and real-time search.

JavaScriptHTML/CSSRed Team

Data Breach Checker

OSINT desktop tool to check if email credentials have been compromised in known data breaches. Modern dark-mode GUI with real-time breach detection and detailed reports.

PythonOSINTAPI

Port Scanner

Multithreaded port scanner with banner grabbing and service detection. Supports common ports, ranges, and full 65535 scans with clean colored output and export.

PythonNetworkingRecon

WAF Bypass Toolkit

Web Payload Obfuscator — a Swiss Army Knife for WAF evasion. Generate obfuscated payloads for 7 vulnerability categories (SQLi, XSS, CMDi, LFI, SSRF, SSTI, XXE) with multiple evasion layers.

ReactViteBug Bounty

TargetVeil

Local-first redaction and pseudonymization for AI-assisted penetration testing. Includes 17 pentest profiles, global identifier packs, engagement scope files, explainable preview and synthetic leakage-canary tests.

JavaScriptPythonPrivacyOpen Source

View All Repositories

<Get In Touch/>

contact.sh

$ echo "Let's connect!"

Interested in collaborating, discussing cybersecurity, or just want to say hello? Feel free to reach out through any of the platforms below.

$ cat socials.txt

<About Me/>

<Tech Stack/>

Languages

Offensive Security

Tools

AI & Automation

Platforms

<The Roadmap/>

TryHackMe & PentesterLab Foundations

HackTheBox Academy & Labs

PortSwigger Web Security Academy

Professional Penetration Tester

<Technical Knowledge Base/>

Machines

Challenges

Sherlocks

Pro Labs

Security Research & Labs

Bug Bounty

Authenticated SMTP Test Function Exposes a Private-Network TCP Oracle

DNS-Resolved Private Address Bypass in a Server-Side JWKS Fetcher

Authenticated Connection Validation Exposes an Internal TCP Timing Oracle

<Certifications/>

Pre Security

Intro to Cyber Security

Complete Beginner

Junior Pentesting

Offensive Pentesting

CompTIA Pentest+

Web App Pentesting

Red Teaming

SOC Level 1

SOC Level 2

Security Engineer

DevSecOps

Attacking & Defending AWS

Cyber Advent 2025

Advanced Endpoint Investigations

Web Application Red Teaming

AI Security

PTLA1362

PTLB1529

PTLC0337

PTLE7397

PTLG0449

PTLH2392

PTLI1077

PTLK0031

PTLN27407

PTLO0434

PTLP5618

PTLS3280

PTLT0183

PTLY2033

PTLR3122

PTLAPI0095

PTLX0334

Web

Media (PTLM0006)

Hades (Mini Pro Lab)

P.O.O. (Mini Pro Lab)

Xen (Mini Pro Lab)

FullHouse (Mini Pro Lab)

Mythical (Pro Lab)

Puppet (Pro Lab)

<Featured Security Tools/>

Payload Obfuscator

Living Off the Land

Reverse Shell Generator

WAF Bypass Toolkit

TargetVeil

<Projects/>

Reverse Shell Generator

Cyber News Scraper

Hacking Cheatsheets

LOLBins Reference

Data Breach Checker

Port Scanner

WAF Bypass Toolkit