Rafał Szponarski

Offensive Security Specialist

Poland

About

I offer services in penetration testing, security consulting, IT infrastructure administration, and providing training for teams across organizations to enhance cybersecurity awareness and operational efficiency. Experienced Offensive Security Specialist with strong expertise in penetration testing and security assessments in enterprise environments. I specialize in identifying vulnerabilities and supporting organizations in their remediation, helping them understand how attackers could target their systems and how to effectively defend against them. Additionally, I have a solid background in IT systems administration, along with experience in automation and offensive tooling using Python, Bash, SQL, and PowerShell. The most important certifications and achievements: - HTB CPTS | CWES | CJCA - HTB Guru | Former Top 50 | Bug Killer - 30× Hack The Box Pro Labs + all 6 Fortresses - Top 1% TryHackMe

Certifications

Certified Penetration Testing Specialist (HTB CPTS) Hack The Box 2026-01-13 Verify
Certified Web Exploitation Specialist (HTB CWES) Hack The Box 2025-09-22 Verify
Certified Junior Cybersecurity Associate (HTB CJCA) Hack The Box 2026-01-21 Verify
Certified Network Pentester (CNPen) The SecOps Group 2026-08-14 Verify

Projects & Labs

project

Hack The Box Profile View

project

Hack The Box Guru View

My HackTheBox profile

project

Hack The Box Top 50 View

I've achieved a position in the top 50 best hackers

project

Hack The Box Bug Killer View

I've found and reported valid security bugs in Hack The Box platform

project

TryHackMe Top 1% View

I've achieved GUARDIAN rank and ranked among the top 1% of players in global ranking

TryHackMe
project

JetBrains Academy View

In my free time, I like to code. Here you can find some of my projects created while working on the JetBrains Academy platform

Python, SQL, Bash, PowerShell, Git

Skills

Penetration Testing

Security AssessmentsVulnerability IdentificationPenetration TestingWireless PentestingActive Directory PentestingEvasion TechniquesC2 Framework

Scripting

PythonBashPowerShellSQL

Operating Systems

IT Infrastructure AdministrationActive DirectoryWindowsLinuxLog AnalysisVirtualizationHardening

General

Security TrainingOSINTGitNmapBurp SuiteCobalt StrikeMetasploitReport WritingSocial EngineeringRed TeamingMITRE ATT&CKThreat ModelingOffensive ToolingPurple TeamingBlue TeamingCommunication

Network Security

IDSIPSFirewallNetwork Traffic AnalysisEnterprise NetworkNetwork SecurityTCP/IPWeb App Security

Incident Response

Incident HandlingVulnerability AssessmentRisk Assessment

Cloud Security

Cloud Security

SIEM & Monitoring

SIEMSOC

Application Security

Reverse EngineeringOWASP Top 10