A LITTLE PAUSE BEFORE THE JOURNEY
Opening the forest…
Hello, I’m Muhammad Arafat.
Red Team Operator & Penetration Tester.
Exploring systems. Connecting the dots.
Building things that make a difference.
02 / THE PERSON BEHIND THE HANDLE
My work sits at the intersection of offensive security, investigation, and building useful tools.
I’m drawn to the details that others overlook: how systems trust each other, what an exposed service reveals, and how scattered information becomes a clearer picture.
My approach is simple. Observe carefully. Question assumptions. Build with purpose. Keep learning.
CURRENT FOCUS
There is always
another layer
to understand.
A WORKING PHILOSOPHY
03 / BUILT WITH INTENTION
Small tools. Clear purpose.
A closer look at the systems around us.
Finding risky certificate templates and making Active Directory trust relationships easier to investigate.
Mapping exposed services and connecting external visibility with meaningful security context.
Connecting public signals across domains, records, and metadata into a more coherent investigation.
04 / STEPS ALONG THE WAY
ZERO-POINT SECURITY
CRTO
TCM SECURITY
PNPT
TRYHACKME
PT1
The learning is the part that never ends. ✦
05 / THOUGHTS FROM THE FIELD
A space for security research, practical experiments, and the things learned along the way.
Read on Medium ↗Before looking for a weakness, map who trusts whom. Identify the identity, the resource, and the permission that connects them. A clear model makes both testing and reporting more useful.
A SHORT FIELDNOTE
A single exposed service or public record is a starting point. Corroborate it with independent evidence, record where it came from, and keep an observation separate from a conclusion.
A SHORT FIELDNOTE
A useful tool should make its output understandable. Clear evidence, reproducible steps, and honest limitations matter as much as the finding itself.
A SHORT FIELDNOTE
06 / EVERY GOOD THING STARTS WITH A CONVERSATION
✦A thoughtful question, an interesting project,
or just a hello. My inbox is open.