Nehoray Shaul

I'm an Offensive Security practitioner with a background in enterprise IT infrastructure, Windows environments, Active Directory, Microsoft 365 administration, and virtual desktop infrastructure.

My experience in IT gave me a practical understanding of how enterprise environments are built, managed, and maintained. Today, I apply that knowledge to offensive security — investigating how misconfigurations, weak access controls, and security vulnerabilities can be identified and exploited.

I'm PNPT and PJPT certified, with hands-on experience in internal network penetration testing, Active Directory attack path analysis, Windows and Linux privilege escalation, and web application security testing through practical labs and technical challenges.

The writeups published here document my investigations from enumeration to impact, including technical findings, exploitation steps, and the reasoning behind each attack path.

Professional Background

• Enterprise IT infrastructure and systems administration
• Windows environments and Active Directory administration
• Microsoft 365 administration
• Virtual desktop infrastructure (VDI)
• Enterprise troubleshooting and technical support

Offensive Security Focus

• Internal network penetration testing
• Active Directory security and attack path analysis
• Windows and Linux privilege escalation
• Web application security testing
• Microsoft Entra ID and Azure security

Independent Project

I also develop PathForge, an independent project inspired by challenges I've encountered while documenting security investigations. It's one way I explore how practical tooling can support a clearer investigation process. You can read more about it on the Projects page.

Continuous Learning

I continue building practical skills through HackSmarter, EntraGoat, TryHackMe, and personal lab environments. My goal is to understand not only how an attack works, but why it works — and to document what I learn along the way.