Helping developers build secure systems in an insecure world.
📍 Based in Europe | Available remotely

Technology is moving fast — but so are threats.

My mission is to protect meaningful digital products before someone else breaks them.
I work with creators and builders, helping them challenge assumptions and secure the parts of their systems that are often overlooked.
To me, offensive security is not about chaos — it's about clarity.

I don’t just look for what’s broken. I question what was assumed to be safe.

I specialize in Web & API Pentesting, with hands-on experience in:

• Application-layer vulnerabilities: XSS, SQLi, RCE, authentication bypass
• API testing: BOLA, IDOR, Broken Auth, insecure tokens
• Cloud misconfigurations: exposed S3 buckets, metadata abuse, IAM flaws
• Logic flaws and chained vulnerabilities
• Manual recon, chaining attack vectors, and tailored exploitation
• Clean, actionable reports that developers actually use

• Nmap – for precise scanning, service detection, custom NSE scripts
• ffuf – for fast and recursive directory and parameter fuzzing
• Burp Suite – manual request analysis, interception, and chaining
• SQL techniques – error-based, boolean-based, time-based injections and bypasses
• Netcat, curl, dig, whois – essential tools for live network and service inspection
• Wireshark – for low-level packet analysis when recon requires depth

• ✅ eJPTv2 (82%) – INE / OffSec

  

• ✅ ICCA (95%) – INE Certified Cloud Auditor

  

• 🎯 Currently Preparing:

  • OSCP – Offensive Security
  • CPTS – Hack The Box

• 🏫 MSc in Cybersecurity – University of Warsaw

• 🧠 Full-time Technical Training – 42 School Warsaw

• 🎓 BSc in Sociology – Sorbonne (Paris I)

• 🔎 WebApp-Pentest-Report
  A real-world security audit for a SaaS platform, focused on SOC2/ISO27001 compliance.

• 🌐 Matrix-Themed Portfolio
  My cyberpunk-inspired site built to showcase skills, mindset, and code.

• 📄 Nmap Cheatsheet
  Recon and enumeration techniques tuned for practical web assessments.

"Patryk performed external penetration tests and delivered a detailed, well-structured report with clear explanations and actionable recommendations. We were able to fix multiple vulnerabilities and significantly strengthen our security posture."
— Karol Obrebski, CEO, CargoAssistant

"Patryk demonstrates an exceptional eagerness to learn and develop professionally. His positive attitude and enthusiasm make him an ideal candidate for any junior cybersecurity or DevOps position."
— Alexander Sadowski, Senior Engineer, SoftServe

"Instead of doing standard 42 school tasks, Patryk rooted a machine. If you're looking for a pentester who not only finds vulnerabilities but truly understands their impact — I strongly recommend him."
— Bartosz P. Krok, Cybersecurity Engineer in Training

• 🔐 Hack The Box – pkieszek
• 🐞 HackerOne – researcher (Private program testing)
• ✍️ Medium – @cybernomad42

"I don’t hack for noise. I hack to understand what others overlook."