Hi, I’m Andrew!

WhoAmI

┌──(andrew㉿kali)-[~/ctf]
└─$ cat profile.txt

Name: Andrew Kapaldo
Location: USA-WV
Role: Security Researcher | CTF Player
Certifications: CompTIA A+, Network+, Security+, Pentest+, (ISC)² SSCP, CCSP

┌──(andrew㉿kali)-[~/ctf]
└─$ ./get_skills.sh --list-domains

[+] Core Competencies:
    ├── Web Application Security
    ├── Digital Forensics
    ├── Network Analysis
    └── OSINT & Reconnaissance

[+] Languages & Tools:
    ├── Python (Scripting & Exploit Dev)
    ├── PowerShell (Windows Security)
    ├── Bash (Linux Administration)
    ├── Burp Suite, Wireshark, Ghidra
    └── Metasploit, SQLmap, Nmap

┌──(andrew㉿kali)-[~/ctf]
└─$ █

About Me

I'm a technology enthusiast with a passion for cybersecurity and CTF competitions. With certifications in CompTIA A+, Network+, Security+, Pentest+ and (ISC)² SSCP and CCSP, I enjoy tackling complex security challenges and documenting my learning journey through detailed writeups.

When I'm not breaking into virtual machines or solving cryptography puzzles, I volunteer with my local search and rescue team helping find lost and missing persons. I believe in using technology to make people's lives better and safer.

This site serves as my knowledge base and portfolio, documenting CTF challenges from platforms like HackTheBox, TryHackMe, Huntress CTF, and others.

Recent Writeups

Recent Achievements

What I'm Working On

🔍 Currently Exploring:

• Developing custom Python tools for CTF automation
• Deep diving into Windows privilege escalation vectors
• Building a home lab for malware analysis

📚 Learning Goals:

• CISSP Certification (2026)
• MS Business Cybersecurity Management (2026)
• Advanced web application penetration testing
• Reverse engineering and malware development

Categories

Explore writeups by category:

• 🌐 Web Exploitation - SQL injection, XSS, SSRF, and more
• 💾 Binary Exploitation - Buffer overflows, ROP chains, format strings
• 🔐 Cryptography - Ciphers, encoding, cryptanalysis
• 🔍 Forensics - Memory dumps, disk analysis, steganography
• 🦠 Malware Analysis - Reverse engineering malicious software
• 🕵️ OSINT - Open source intelligence gathering

Feel free to reach out via GitHub or LinkedIn. I'm always happy to discuss security topics, CTF strategies, or collaborate on projects!