I’m Mikel González Tejero. I’m doing a master’s in cybersecurity at UC3M, after a computer engineering degree at Deusto.

I got into security the way a lot of people do, through CTFs and deliberately vulnerable machines. What kept me there was the shape of the work: you start with nothing but an IP address, you pick at it until something gives, and then you write down exactly how it happened so the next person can follow the same path. The write-up matters to me as much as the shell does.

Lately I’ve been just as drawn to the other side of it. Once you’ve broken enough things, you start seeing how they should have been built, configured and watched so they wouldn’t have fallen. I like working both ends: take something apart, then explain how to stop it coming apart.

This blog is where the longer write-ups live. Mostly engagements against lab targets, from the first scan through to root, with the findings and the fixes laid out the way I’d want to read them. Everything here is done on machines I own or on authorized practice targets, never anything real.

If you’d rather see the work than read about it, my reports are on GitHub. You can also find me on LinkedIn. I work in Spanish and English, based in Spain.