c'est completement harr.

I'm Moha (short for Mohammad), a 15 y/o cyber enjoyer who got bored of video games and decided breaking stuff was more fun. Currently grinding through HTB Academy's CPTS cert and planning to hit OSCP after that. Got the eJPT, wrecked Dante Pro Lab, and even finished the Google Cybersecurity Coursera thing because… why not.

still jobless atm 🥀🥀💔💔

• Mess around with Python until something works (or doesn’t)
• Learn how to break systems so I can ethically break more systems
• Reverse engineer random stuff just to see if I can
• Occasionally write decent scripts, mostly for fun

Reverse engineering a cheap generic drone. Sniffed comms, still trying to reverse the app. Check it out @ : https://github.com/MohaCHarr/generic-drone-hacking

A Discord RAT I made in ✨Python✨ for ✨educational purposes✨. Fully modular, handles system info, shell commands, file transfers, persistence, even RDP setup and some of it's components are still undetected, somehow. Honestly trash but it works, and that's what matters.

Check it out @ : https://github.com/MohaCHarr/GRA-T !!

A raw dump of my notes from TryHackMe, HTB and random docs (cleaned a bit times to times). Use at your own risk (or benefit). Updated when I remember. Check them out @ : https://github.com/MohaCHarr/CHarr-SecurityNotes

• 🎯 HTB Academy

  • Top 5% | 282 targets compromised
  • Completed 30+ modules across web, network, and privilege escalation
  • Modules include:
    • Windows & Linux Privilege Escalation
    • SQLi, Command Injection, File Uploads
    • AD Attacks, Pivoting & Tunneling, Metasploit, Ffuf, SQLMap
    • ...and everything in between

• 🧠 Certs

  • eJPT (INE)
  • Google Cybersecurity Certificate
  • Not a cert but I pwned the Dante ProLab

• 🎯 Goals

  • Currently working on CPTS by HTB
  • OSCP as soon as possible

• Python, Bash, JavaScript
• Currently learning C and C++ to go deeper into exploit dev
• Tools like Burp Suite, Nmap, Metasploit, Wireshark
• Mostly on Kali Linux, sometimes Parrot, and yeah... Windows too

everything here is just for educational purposes. don't be weird with it.

still jobless btw, hmu if you're hiring pentesters with no experience but too much time.