Home

daniel@ploetzl: ~
daniel@ploetzl ~ $ whoami
Daniel Plötzl
Cybersecurity | Software Development | DevOps & Infrastructure Engineering

daniel@ploetzl ~ $ cat focus.txt
System exploitation mechanisms • Process behaviour • Detection analysis
Penetration testing fundamentals • Endpoint testing • Observability evasion
Linux systems engineering • Infrastructure as Code • Container orchestration

daniel@ploetzl ~ $ ls -l skills/
drwxr-xr-x linux-internals/ # process lifecycle, signals, execution model
drwxr-xr-x system-interaction/ # X11, input grabbing, session-level exploitation
drwxr-xr-x execution-labs/ # runtime behaviour, process orchestration, forensic visibility
drwxr-xr-x pentesting-basics/ # attack surface analysis, system behaviour testing
drwxr-xr-x systems-infrastructure/ # Linux administration, virtualisation (KVM), containerisation
drwxr-xr-x devops-automation/ # Infrastructure as Code, CI/CD, configuration management
drwxr-xr-x web-applications/ # full-stack architecture, WAF, secrets management

daniel@ploetzl ~ $ systemctl status motivation.service
● motivation.service - Cybersecurity & DevOps/Infrastructure development track
Loaded: loaded (/usr/lib/systemd/system/motivation.service; enabled; preset: enabled)
Active: active (running) since Tue 2024-04-02 09:42:00 CET; continuous
Main PID: 42 (hands-on-security-and-infrastructure-learning)
Status: "Building offensive security tooling and a DevOps/Infrastructure lab
(KVM, Ansible, Terraform, Kubernetes, Prometheus/Grafana, GitLab CI) - 42 Mastery/Advanced"

daniel@ploetzl ~
18 CTF Challenges
8 Write-ups
4 Offensive Labs
25 42 Vienna Projects

Portfolio Purpose
This website documents my development across two connected tracks: penetration testing and Red Team operations and DevOps / Infrastructure engineering. Both are built on the same foundation: hands-on systems programming, Linux internals and a habit of writing up what I build and break.

What you'll find here:
• Technical write-ups spanning offensive security, Linux systems and infrastructure automation
• Small lab tools exploring system exploitation, session control and container/virtualisation mechanics
• Experiments designed to analyse system behaviour under controlled conditions, on both the attack and the operations side


Write-ups
Linux user-space workspace relocation into RAM with explicit, encrypted persistence. Demonstrates separation of runtime and durable state, controlled commit semantics and the impact of execution context on filesystem visibility and monitoring.
Sandbox Ramdisk BashScripting OperationalSecurity AgeEncryption DataProtection
USB Human Interface Device (embedded system, RP2350) project, emulating keyboard and mouse input using a single USB interface to analyse endpoint behaviour and input injection scenarios.
EmbeddedSystems USB-HID RaspberryPiPico2 RP2350 InputSimulation EndpointSecurity C-Programming
User-space X11 project, creating an override-redirect fullscreen window, bypassing the window manager, grabbing all keyboard and mouse input and locking user session at display level without elevated privileges.
X11 Xlib InputCapture SessionControl UserSpace C-Programming
Penetration testing methodologies, legal frameworks, rules of engagement and testing scopes (black/grey/white box).
Pentesting Methodology Fundamentals TryHackMe
Linux user-space process orchestration and lifecycle manipulation project, using RAM-backed self-migration, concurrent payload execution, randomised scheduling and aggressive process group termination. Includes a monitoring component that tracks transient process populations and runtime behaviour in real time.
Linux BashScripting ProcessManagement Signals RuntimeAnalysis
Detection types, lifecycle and frameworks (ADS, DML, ATT&CK) for building sustainable threat detection programs.
DetectionEngineering SIEM MITRE Frameworks TryHackMe
Foundational log analysis covering data sources, collection, formats and hands-on authentication log investigation.
LogAnalysis Fundamentals TryHackMe
Bash script for system authentication logs (/var/log/auth.log): extracts SSH auth events, highlights failed logins, patterns and possible compromises.
Linux Bash LogAnalysis Authentication SSH AccessControl
daniel@ploetzl: ~
daniel@ploetzl ~ $ date

daniel@ploetzl ~ $ exit


The system will reboot now!

Connection to 100.64.0.16 closed.