Assess & Exploit
- Web & API testing
- Database testing
- Infrastructure
Cybersecurity.
MatíasBataglia.
Cybersecurity Specialist
Pentesting · Application Security · Defensive security
I assess applications, work on controls and analyze security signals.
Cybersecurity with a technical foundation.
I have worked in cybersecurity since 2021, backed by a university degree and CPTS certification. My work spans penetration testing, application security, protective controls, vulnerabilities and monitoring.
Experience and educationBachelor's Degree in SystemsFacultad de Ingeniería · Universidad de Buenos Aires
My work in cybersecurity.
I connect application assessment with service protection, vulnerability management and event analysis. Automation and documentation support that work.
Secure Applications
- Application Security
- Web & API security
- Access control
Engineer & Protect
- WAF
- Reverse proxy
- Firewall policy
Detect & Operate
- Vulnerability management
- CVE validation
- Monitoring
The work, in practice.
Web and API assessment
I examine requests, inputs and access controls. I document findings, their conditions and recommendations for addressing them.
HTTP testing · Finding validation · Technical reporting
Security controls and services
I contribute to configuring and validating WAFs, proxies and agents. I investigate compatibility, dependency and TLS trust issues.
Rules and exceptions · Linux troubleshooting · Certificates
Events, detections and observability
I review events and detections, troubleshoot agents and ingestion, and work with service metrics. I distinguish data reception from indexing and visualization.
SIEM/XDR · Telemetry · Investigation and documentation
Practice sharpens judgment.
Explore Hack The BoxMachines, defensive investigations and technical challenges in lab environments. A record of practice and study, with reviewed public notes.
- Completed machines in the record
- 84
- Sherlocks
- 14
- Technical challenges
- 48
Every machine. Another perspective.
A map of completed machines in the record. Explore a point to discover its name and open its page.
Skip records
- Active — Windows — Open page
- Alert — Linux — Open page
- Analytics — — Open page
- Antique — — Open page
- Arctic — — Open page
- Armageddon — — Open page
- Artificial — Linux — Open page
- Baby — Windows — Open page
- Bashed — Linux — Open page
- Bastion — Windows — Open page
- Bedside — Linux — Open page
- Beep — — Open page
- Bizness — Linux — Open page
- Blocky — Linux — Open page
- Blue — Windows — Open page
- BoardLight — — Open page
- Broker — Linux — Open page
- Buff — — Open page
- Busqueda — Linux — Open page
- Cap — Linux — Open page
- Chemistry — Linux — Open page
- Cicada — Windows — Open page
- Code — — Open page
- CodePartTwo — Linux — Open page
- Codify — — Open page
- Cohort — Linux — Open page
- Connected — Linux — Open page
- Conversor — — Open page
- CozyHosting — — Open page
- DarkZero — Windows — Open page
- Data — — Open page
- Devel — Windows — Open page
- Devvortex — — Open page
- Dog — — Open page
- Down — Linux — Open page
- Editor — Linux — Open page
- Eighteen — Windows — Open page
- EscapeTwo — Windows — Open page
- Expressway — Linux — Open page
- Fluffy — Windows — Open page
- Grandpa — — Open page
- Granny — Windows — Open page
- Greenhorn — Linux — Open page
- Headless — — Open page
- Imagery — Linux — Open page
- Jerry — Windows — Open page
- Keeper — Linux — Open page
- Knife — Linux — Open page
- Lame — Linux — Open page
- Legacy — Windows — Open page
- LinkVortex — Linux — Open page
- Mirai — Linux — Open page
- MonitorsTwo — — Open page
- Netmon — Windows — Open page
- Nexus — Linux — Open page
- Nibbles — Linux — Open page
- Nocturnal — Linux — Open page
- NodeBlog — — Open page
- Optimum — — Open page
- Orion — Linux — Open page
- Outbound — Linux — Open page
- Paper — — Open page
- Paperwork — Linux — Open page
- Perfection — Linux — Open page
- PermX — — Open page
- Photobomb — Linux — Open page
- Planning — Linux — Open page
- Precious — Linux — Open page
- Reactor — Linux — Open page
- Retro — Windows — Open page
- Return — Windows — Open page
- Sau — Linux — Open page
- Sea — Linux — Open page
- Shocker — Linux — Open page
- Sightless — Linux — Open page
- Signed — Windows — Open page
- Soulmate — Linux — Open page
- Squashed — Linux — Open page
- Titanic — Linux — Open page
- UnderPass — Linux — Open page
- Validation — Linux — Open page
- Voleur — Windows — Open page
- VulnEscape — Windows — Open page
- Wifinetic — Linux — Open page
LinuxWindows84 records
Follow your curiosity.
Each point opens a machine page. Public notes appear only where publication is authorized.
Open the complete catalogRecorded completions, not an official owns counter. Color and shape distinguish systems, without skill ratings.
The foundation: software development.
Before working in security, I built applications. That experience brings code, architecture and web-system context to my current work.
View the full careerFull-Stack Developer
Nine years building applications with Java, Spring Boot, Spring MVC and Spring Framework, including microservice architectures. A development background spanning React and Node.js that now informs how I assess application security.
JavaSpring BootSpring MVCSpring FrameworkMicroservicesReactNode.js