black3dm0ndoffensive security researchRed Team Operator | Penetration Tester
I help organizations understand how weaknesses can be discovered, validated, and remediated through realistic offensive security testing, clear evidence, and practical reporting.
Research, labs, tools, and field notes by Neno Stamenov (black3dm0nd).
validated through client engagements
Client-engagement experience across human, application, infrastructure, wireless, cloud, network, and code-level attack surfaces - focused on realistic testing, evidence-based reporting, and practical remediation.
defensive research
Alongside offensive testing, I maintain a strong interest in Blue Team disciplines, especially malware analysis, digital forensics, threat hunting, intelligence-led detection, SIEM workflows, and EDR telemetry.
Understanding malicious behavior, execution flow, indicators, and how offensive tradecraft appears from a defensive lens.
Focusing on traces, artifacts, timelines, and evidence that help reconstruct activity after suspicious or malicious events.
Exploring SIEM workflows, EDR telemetry, detection logic, and intelligence-led approaches for identifying attacker behavior.
featured
Client-safe technical writeups, field notes, code-heavy analysis, and remediation-focused research.
Client-side reconnaissance with jsrecon: JavaScript bundles, source maps, hidden endpoints, secrets, DOM-XSS leads, and the code developers forget they shipped.
Why building a local CTF environment is better training than only solving boxes, how to turn one bug into several difficulty levels, and where platform hardening matters.
Credential-free Microsoft 365 and Entra ID identity reconnaissance for authorized phishing preparation, tenant fingerprinting, username formats, and validated target lists.
controlled experiments
Controlled experiments, attack simulations, testing notes, screenshots, and terminal/code examples from the research workflow.
operator utilities
Scripts, automation, recon helpers, reporting utilities, snippets, and GitHub project notes for authorized security work.
operator profile
$ whoamiblack3dm0nd Red Team Operator | Penetration Tester Authorized testing. Evidence first. Remediation always.
A closer look at black3dm0nd: offensive security focus, practical experience, certifications, hands-on labs, and the mindset behind the research.
Open whoamidashboard summary
A simple count of published research, lab notes, and tooling currently indexed in the archive.