Said Ali

Hi, I’mSecurity Researcher & Penetration Tester.

Penetration tester focused on Active Directory security, network security and web security — currently pursuing the HTB CAPE certification.

Get in touchRead writeups

Featured Writeups

View All

Technical writeups — practical security work, documented.

HTB Checkpoint

2026-06-17

Active Directory box featuring no web attack surface. The path to Domain Admin runs through object recovery, a supply-chain compromise, and the recently disclosed badSuccessor dMSA technique.

  • HTB
  • Medium
  • Active Directory
  • Kerberoasting
  • BloodyAD
  • dMSA

Featured Projects

View All

Offensive tooling and automation I build and maintain.

recon.sh

A modular automation script built in Bash designed to streamline initial reconnaissance, asset discovery, and active/passive information gathering during infrastructure penetration tests.

View source →

About

I’m Said Ali, also known online as S4dio — a penetration tester with a focus on network and Active Directory security. I like pulling apart how AD environments actually break in practice: misconfigurations, broken trust relationships, credential exposure — much of that instinct comes from ranking Pro Hacker on Hack The Box, alongside regular CTF play and a growing interest in bug bounty hunting.

Technical Skills

Active Directory & Network

  • Kerberoasting
  • AS-REP Roasting
  • dMSA Exploitation
  • NTLM Relay
  • Pivoting
  • BloodHound/BloodyAD

Web & Bug Bounty

  • OWASP Top 10
  • API Security
  • Server-Side Injection
  • Subdomain Takeovers

General & Tools

  • Linux/Windows Hardening
  • Wireshark
  • Burp Suite
  • Python/Bash Scripting

Certifications

CPTS

Certified Penetration Testing Specialist

Verify via Credly

Background

M.Sc. in Cybersecurity

In Progress

B.Sc. in Computer Science

Completed

Networking Intern

Somtel

Active CTF Competitor

Hack The Box — Pro Hacker