Skip to content
View 0xZiki's full-sized avatar
1 follower · 0 following

Highlights

  • Pro

Block or report 0xZiki

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
0xZiki/README.md

Ahmed Sophy Elzeky (0xZiki)

Cybersecurity Software Engineer & Offensive Tool Architect
Undergraduate in Computer Science @ Mansoura University, Egypt

LinkedIn Email Focus

Flagship Publication (The Core Research)

Active Directory Protocol Internals

Active Directory Protocol Internals

Volume 1: Foundations — A First-Principles Guide to Enterprise Identity, Kerberos Cryptography, and Kernel Authorization

An exhaustive 143+ page engineering textbook dissecting enterprise identity at the wire and kernel layers. Explores the internal mechanics of Active Directory multi-master replication, Kerberos cryptographic workflows, PAC dual-signatures, NTLMv2 challenge-response, and Windows Security Descriptors (SDDL).

Standard: ISO B5 Trim • Typeset with Typst • Fully Open-Source (CC BY-NC-SA 4.0)
Academic Registration: DOI: 10.5281/zenodo.23282927 (CERN / Zenodo Indexed)
Read Online or Download Release

Production Offensive Tooling & Network Engines

I build high-performance, low-level networking and reconnaissance tooling from the ground up, avoiding third-party dependencies to maintain raw socket control and protocol fidelity:

  • GhostSniffer v2.0 — Advanced stealth network reconnaissance engine implemented directly over raw sockets with zero external dependencies. Features manual RFC 1071 IP/TCP/UDP checksum calculation, Layer-2 ARP discovery, TCP SYN half-open scanning, DNS protocol mimicry, and passive OS fingerprinting via TTL analysis.
  • UltronNet v2.0 — Custom encrypted network transport and command utility ("Swiss Army Knife"). Built in a single unified architecture supporting bidirectional TCP/UDP sockets, automated SSL/TLS self-signed negotiation, interactive PTY shell allocation, and concurrent port forwarding.

Core Technical Stack & Applied Domains

┌─────────────────────────┬────────────────────────────────────────────────────────┐
│ DOMAIN                  │ SPECIALIZATION & APPLIED PRIMITIVES                    │
├─────────────────────────┼────────────────────────────────────────────────────────┤
│ Enterprise Identity     │ Kerberos State Machines, NTLM Relay, AD CS (ESC1–ESC8) │
│ Operating System Core   │ Access Tokens, SRM Decision Trees, DACL/SACL Graphs    │
│ Network Engineering     │ Raw Sockets, RFC 1071 Checksums, ASN.1 BER, DNS-SRV   │
│ Systems Programming     │ Python 3.8+ (Asyncio, Raw Sockets, PTY), Bash, Linux   │
│ Tooling & Protocols     │ Impacket, BloodHound, NetExec, Wireshark, Typst        │
└─────────────────────────┴────────────────────────────────────────────────────────┘

Pinned Loading

  1. Active-Directory-Protocol-Internals Active-Directory-Protocol-Internals Public

    A First-Principles Guide to Enterprise Identity, Kerberos Cryptography, and Kernel Authorization (Volume 1: Foundations)

    1 1

  2. Offensive-Security-Writeups Offensive-Security-Writeups Public

    Technical CTF Writeups, HackTheBox, TryHackMe, Privilege Escalation, Cybersecurity Portfolio

  3. UltronNet UltronNet Public

    Advanced Network Swiss Army Knife with SSL/TLS encryption, PTY Shell, and Port Forwarding support.

    Python 1

  4. Ghost_Sniffer Ghost_Sniffer Public

    GhostSniffer v2.0: Advanced Network Reconnaissance Tool built with Python Raw Sockets. Features DNS mimicry, Decoy routing, and strict OPSEC (.env). Zero external dependencies.

    Python 1