Ktn

Main Project

Orbyte

Encrypted Messaging Platform

Live

End-to-end encrypted messaging for people who value privacy. Encrypted DMs, community servers and channels — modern, minimal, secure.

orbyte.lol discord.gg/orbyte

Timeline

2026

Orbyte — Founder

Built and launched Orbyte, an end-to-end encrypted messaging platform.

2025

CTF & Pentesting

Active participation in CTF competitions on Root-Me and TryHackMe. Focus on web security and OSINT.

2024

Started Cybersecurity

Began learning offensive security, web exploitation and scripting.

Skills

Languages

Python Node.js Bash JavaScript HTML / CSS

Security

Burp Suite Nmap Metasploit SQLmap Gobuster Wireshark

Systems & Tools

Linux Windows Docker Git

Platforms

tryhackme.com/p/sql.ktn

Blog

Articles & Writeups

CTF writeups, security research and dev articles.

→

CTF Highlights

TryHackMe Hard

Internal

Full black-box penetration testing challenge. Enumerate services, crack credentials, pivot through the internal network and escalate to root.

TryHackMe Hard

Ra

Windows Active Directory environment. Kerberoasting, BloodHound enumeration and full domain compromise.

TryHackMe Hard

Borderlands

Compromise a perimeter host and pivot through the internal network using advanced lateral movement techniques.

TryHackMe Hard

Iron Corp

Gain unauthorised access to Iron Corp's internal systems through a series of chained exploits.

TryHackMe Medium

dogcat

Exploit a PHP application via Local File Inclusion then break out of a Docker container to own the host.

TryHackMe Medium

0day

Shellshock vulnerability and kernel exploitation to escalate privileges on a Ubuntu machine.

Root-Me Advanced

ELF x64 — Shellcoding

Binary exploitation — craft custom shellcode for a 64-bit ELF binary, bypassing protections to gain code execution.

Root-Me Advanced

Java — SSTI

Server-Side Template Injection in a Java application. Identify the template engine and craft a payload for RCE.

Root-Me Advanced

SQL Injection — Blind

No error output. Extract database contents character by character using boolean-based blind injection.

Root-Me Medium

GraphQL — Injection

Abuse a GraphQL endpoint to perform introspection and inject malicious queries to extract sensitive data.

Root-Me Medium

LDAP Injection — Auth

Bypass an LDAP-based authentication mechanism using injection techniques to gain unauthorised access.

Root-Me Medium

PHP — Type Juggling

Exploit PHP loose comparison to bypass authentication — a subtle but critical language quirk.

Contact

Want to get in touch? Reach out through any of these channels.

↗

Session 058dec816c871e0915264bdd7b8d641abe41d82b98b57c5fcc1d18d7ae80e66f38

Copy