JMM.
ES | EN
./contact.sh

> root@jmolero:~$ whoami

Computer Engineer

Cybersecurity
Auditor
& Developer.

I like to understand how systems work to ensure they operate securely. Web auditing, infrastructures, automation, and tools/web/app development.

eJPTv2 PNPT PMPA PAPA

"Security is a process, not a product. It is not about building higher walls, but knowing where they can be scaled."

— Bruce Schneier

The Profile

Juan Manuel Molero

I am a cybersecurity professional with practical experience in protecting and attacking corporate environments. Currently preparing for the demanding OSCP certification.

Graduated in Computer Engineering (UM - 2025). My vision is global: from offensive security and vulnerability analysis to the development of web pages and native applications.

Arsenal

Burp Suite Metasploit Python & Shell Windows AD Linux & Docker Astro & React Native OSINT MITRE ATT&CK

HACKTHEBOX_PROFILE

Owned Machines

>70 ↗
> OFFENSIVE SECURITY /// RED TEAMING /// VULNERABILITY RESEARCH /// PENETRATION TESTING /// > OFFENSIVE SECURITY /// RED TEAMING /// VULNERABILITY RESEARCH /// PENETRATION TESTING ///

Background & Credentials

Cybersecurity Auditor

LEGITEC

Jan - Jun 2024
  • Web and infrastructure penetration testing (CVSS >8).
  • Technical reports with remediation plans.
  • Development of tools with Artificial Intelligence.
INE SECURITY

eJPTv2

Junior Penetration Tester

VIEW CREDENTIAL ->
TCM SECURITY

PNPT

Practical Network Pentester

VIEW CREDENTIAL ->
TCM SECURITY

PMPA

Practical Mobile Pentest

VIEW CREDENTIAL ->
TCM SECURITY

PAPA

Practical AI Pentest

VIEW CREDENTIAL ->

Development & Projects

SocialMirror View 1 SocialMirror View 2

SocialMirror

NATIVE APP

WhatsApp chat analyzer. Provides detailed statistics: peak activity hours, message sending rankings, and identifies patterns like "who ghosts whom" using data processing.

_React_Native _Python _AI_Data_Analysis
Bleed View 1 Bleed View 2 Bleed View 3

Bleed

FINANCE TOOL

Monthly subscription manager. Visual interface centered on a "blood drop" reflecting monthly spending. Includes tag filtering, category summaries, invoice export, and savings prediction.

_UI/UX_Design _Data_Export _Fintech
Cybersecurity / Infra

Corporate Infra Defense

Design of a virtualized corporate network integrating critical services (LDAP, PKI, VoIP, IDS Snort, Firewalls). Execution of internal audits, controlled pentesting, and remediation documentation.

/dev/stdout
Medium Publications

Visit Profile ->
Thesis / Research

BLS Cryptography in Hyperledger Fabric

Comparative analysis of key management protocols in both traditional and distributed environments. Search for a solution to avoid single points of failure through an implementation in Hyperledger Fabric of the BLS (Boneh-Lynn-Shacham) elliptic curve cryptography protocol, eliminating the dependency on certification authorities.

Read Article HackTheBox / Writeup

MonitorsThree - HackTheBox

Step-by-step breakdown of the enumeration phase, vulnerability exploitation, and privilege escalation to root in this environment.

Read Writeup

Continuous Training Log

~/training/

$ cat all_courses.db

[✓] Practical Ethical Hacking

[✓] Windows Privilege Escalation

[✓] Linux Privilege Escalation

[✓] External Pentest Playbook

[✓] Mobile Application Penetration Testing

[✓] Open-Source Intelligence

[✓] AI Hacking 101 On-Demand

[✓] AI 100 Fundamentals

... [Loading previous entries] ...

[✓] AI Workflow Course

[✓] Offensive Python

[✓] Cybersecurity and Ethical Hacking: Vulnerability Detection Techniques

[✓] Introduction to Hacking

[✓] Linux Environment Customization

[✓] Introduction to Linux

$ sudo rm -rf /