I'm Christopher Arock — a Penetration Tester focused on Active Directory attacks, web application security, and cloud misconfiguration. Every internship, project, and certification has been deliberately chosen to build toward a career in adversary emulation.
My trajectory blends adversary tradecraft with real defender visibility — an unusual combination that produces sharper, more defensible engagements.
Kalasalingam Academy of Research and Education · GPA 8.79 / 10.0.
Interned at Infoziant Security — tested 3+ live production systems, discovered XSS and SQL injection.
Cloud auditing at Max Conformance, then built a full AD home lab practicing Kerberoasting, LLMNR poisoning and Pass-the-Hash.
SOC internship with Splunk and Microsoft Sentinel — deliberately gaining blue-team visibility.
Delivering formal penetration test reports to real clients while preparing for OSCP.
Four roles chosen to build attacker fluency and defender empathy in parallel.
Engagements and labs that shaped my offensive security craft.
Simulated a full enterprise AD environment to test real-world attack chains aligned with OSCP scenarios and red team engagements. Deployed AD DS with realistic users and GPOs, mapped attack paths with BloodHound and executed Kerberoasting, LLMNR poisoning and Pass-the-Hash.
Built to understand attacker-side phishing techniques, strengthening web application security intuition. Combined ClamAV signatures, ML anomaly detection and the VirusTotal API for multi-layered phishing detection.
Structured learning path chosen to complement real-world internship experience and systematically prepare for OSCP. 200+ hands-on labs covering network exploitation, web vulnerabilities (OWASP Top 10) and privilege escalation.
A working toolkit spanning offensive tradecraft, defender platforms and cloud auditing.
Formal validation of practical offensive and defensive knowledge.
SecOps Group
Feb 2024APIsec University
Oct 2025SecOps Group
Dec 2025200+ labs across Offensive Pentesting & Pre Security paths
OngoingDomains I operate in with confidence — no vanity progress bars, just what I actually do.
OWASP Top 10, authentication bypass, IDOR, injection, business-logic flaws.
Kerberoasting, LLMNR poisoning, Pass-the-Hash, BloodHound attack path analysis.
Recon, service enumeration, exploitation and post-exploitation across enterprise networks.
AWS misconfiguration identification and auditing with Prowler, Steampipe and Powerpipe.
Accurate severity scoring with business context to prioritise remediation.
Executive summaries, PoC reproduction steps and remediation guidance clients can act on.
Available for penetration testing engagements, adversary emulation and security research collaboration.