🛡️ About Me

Hi, I’m Diogo Vieira, a Bug Bounty Hunter & Penetration Tester passionate about cybersecurity, ethical hacking, and responsible disclosure.

I work in web application security, network vulnerabilities, and exploit research, helping companies identify and fix security flaws before attackers can exploit them.

🏆 Achievements & Recognitions

• 🎯 Bug Bounty Programs: Disclosed security vulnerabilities in various organizations.
• 🔍 Recognized by Nokia for a responsible disclosure (December 2023).
• 🛠️ Skilled in: Web app security, Network analysis and vulnerabilites, recon automation, and exploit development.
• 🖥️ Self-Hosting Enthusiast: Deploying and managing custom web applications and cloud infrastructure.
• TryHackMe: Old Top500, Now Top800

🛠️ Technical Skills

1️⃣ Web Application & API Security

• OWASP Top 10: Detecting & mitigating XSS, SQLi, CSRF, SSRF, and RCE vulnerabilities.
• API Security: Skilled in testing API endpoints for authorization flaws and token leakage.
• Burp Suite Proficiency: Used Burp for manual testing & automated security scans.

2️⃣ Network Security & Red Teaming

• Active Directory Attacks: Completed Challanges like ADversary Badge, LDAP enumeration, Kerberoasting, and NTLM relay attacks on TryHackMe.
• Privilege Escalation: Mastered Windows Privilege Escalation (Windows Priv Esc) and Linux Privilege Escalation (Linux PrivEsc) on TryHackMe.
• Packet Analysis: Skilled in Wireshark and TCPDump

3️⃣ Container & Cloud Security

• Docker Escape Techniques: Explored Multiple ways of Escaping Containers Like docker.
• Cloud Monitoring & Auditing: Hands-on experience in AWS, R2 Object Storage, and security audits.

4️⃣ Penetration Testing & Exploit Development

• Metasploit Mastery: Exploited multiple times using Metasploit most of times.
• Hash Cracking: Used tools for Hash Cracking like JTR and HashCat.
• EternalBlue & SMB Exploitation: Successfully exploited EternalBlue CVE.

5️⃣ Digital Forensics & Incident Response (DFIR)

• Log Analysis: Completed Logging Legend Badge, analyzing SIEM logs, firewall logs, and security events.
• Cyber Crisis Management: handling real-world security incidents.
• OSINT & Threat Intelligence: I’m specializing too in open-source intelligence gathering.

6️⃣ Full-Stack Development & Self-Hosting

• Frontend: Learning React, Astro, and Tailwind CSS for web development.
• Backend: Already Worked with Node.js, Express, and PostgreSQL.
• Self-Hosting & DevOps: Deploying applications via Docker, Nginx, and Cloudflare R2 for an independent ecosystem. Already used other alternatives as Vercel, AWS S3, R2, WordPress And others

🔹 How I Work

I use a mix of manual testing and automated tools to discover vulnerabilities in web applications, mobile apps, and cloud environments. My workflow typically involves:
✅ Reconnaissance – Mapping attack surfaces.
✅ Exploitation – Identifying flaws, and exploiting them.
✅ Reporting – Submitting clear, reproducible reports to security teams.

📚 Continuous Learning & Certifications

I continuously expand my skill set through TryHackMe, Hack The Box, and self-hosted labs. Other skills im seeking are

• Reverse engineering
• Building an OS
• Full Stack Development(Trying to get into it more)

📬 Contact

Want to collaborate or discuss security? Feel free to reach out!
📧 Email: snowy@snowy.pt
🐦 Twitter: @SnowyY0_
🔗 LinkedIn: SnowyY