tun0: 10.10.14.7sess: 0x7f3auptime: 133d online
bash — tameen@kali:~

tameen@kali:~$▊

Tameen KassemCybersecurity Professional
View Writeups →Resume

↓ scroll

25+
Writeups
100+
Machines Compromised
HTB · THM
Platforms

// latest

Recent Writeups

view all →
HackTheBox
🔒 LockedInsane

HackTheBox — DarkZero Returns

An Insane-rated, two-forest Active Directory machine. The full writeup is embargoed until the box retires — root it and enter the flag to read it early.

#active-directory#kerberos
2026-07-31preview →
HackTheBox
Hard

HackTheBox — NanoCorp

Abusing a careers-portal zip upload to leak and crack web_svc's NTLMv2 hash via CVE-2025-24071 / CVE-2025-24054, walking a BloodHound ACL chain to monitoring_svc, then hijacking a vulnerable Checkmk agent's MSI self-repair (CVE-2024-0670) through RunasCs to execute code as SYSTEM.

#active-directory#cve-2025-24054#responder#ntlmv2
2026-01-08read →
HackTheBox
Medium

HackTheBox — Outbound

Chaining an authenticated RoundCube RCE exploit, MySQL session token harvesting with DES3 decryption, and a CVE-2025-27591 symlink attack via a world-writable log directory to reach root.

#roundcube#rce#metasploit#mysql
2025-07-12read →

// get in touch

Let's connect

Open to collaboration, discussion, job opportunities, bug bounty tips, and security research opportunities.

tameenyt@gmail.com