rootsec_
Penetration Tester · CHECK Team Member
RootSec_
Built on curiosity. Driven by compromise.
Jonathan — penetration tester specializing in web application security, phishing campaigns, and internal network testing.
- Web Apps
- Phishing
- Internal Testing
- SAP Security
- Red Team
Latest
Recent writing
PhishCraft: From Local to Live Infrastructure
Setting up external infrastructure using VPSs, custom domains, and DNS, focusing on proper configuration and how to deploy GoPhish successfully for phishing engagements against clients.
PhishCraft: Burning Less, Blending More
Focusing on GoPhish customisation and OPSEC by removing default settings, changing identifiers, refining behaviour, and adjusting how campaigns operate so they blend in better and don't get burned.
PhishCraft: Building a Local GoPhish Lab
Setting up a local on-prem phishing lab in VMware using GoPhish, configuring a simple mail setup, and testing how campaigns and templates work before moving into more advanced infrastructure.