Penetration tester based in Amman, Jordan, focused on Active Directory and web application security. I hold 9 offensive-security certifications including CPTS, CRTE, CRTP, eMAPT and OSWP, and I like turning complex findings into reports people actually read.https://00000.rest/en-ushttps://00000.rest/blog/kerberoasting-explained/https://00000.rest/blog/kerberoasting-explained/Why Kerberoasting keeps showing up in Active Directory assessments, and the handful of changes that shut it down.Sun, 20 Sep 2026 00:00:00 GMTactive-directorykerberosdefensehttps://00000.rest/blog/writing-pentest-reports-people-read/https://00000.rest/blog/writing-pentest-reports-people-read/A findings report is a product, not a formality. How I structure one so both engineers and executives act on it.Sat, 05 Sep 2026 00:00:00 GMTreportingmethodologyappsec