_{This README is in English. Versión en español disponible aquí.}

About

Personal repository documenting my practice in web security and penetration testing. Each writeup covers the vulnerability, the exploitation process and the recommended mitigation.

Scope

• PortSwigger Web Security Academy: notes on the reasoning and techniques used in each lab, without full solutions.
• CTFs: challenges and competitions, focused on methodology rather than just the flag.
• HackTheBox: reports on retired machines, written in a professional pentest report format.
• TryHackMe: rooms and walkthroughs.

Content

Section	Description	Status
PortSwigger	Web Security Academy labs	In Progress
CTFs	Challenges and competitions	In Progress
HackTheBox	Retired machine reports	Planned
TryHackMe	Rooms and walkthroughs	Planned

Writeup structure

1. Objective: what needs to be achieved.
2. Reconnaissance: what is observed and how.
3. Exploitation: generic steps and payloads.
4. Mitigation: why it works and how to prevent it.

Disclaimer

This content is for educational purposes only. All techniques were performed in authorized environments (labs, CTFs and retired machines). Do not use them against systems without explicit permission.