Hi — I'm Tiago Galvão

Junior Pentester • Web exploitation • CTFs • Hands-on labs

GitHub LinkedIn Download CV

About Me

Electrical & Computer Engineer • MSc in Cybersecurity • Junior Pentester

BSc in Electrical and Computer Engineering
MSc in Cybersecurity
Based in Portugal
Focused on Cybersecurity, Pentesting & Blockchain
Completed IronMan Cascais 2025 — 12:56h
1st place — Inncyber Innovation Summit 2025 (Student Category)

Tech Stack

Read Full Profile →

Categories

Tags and areas I actively work on:

Web Network Recon Privilege Escalation Blockchain Forensics

Platforms

Where I practice and learn:

TryHackMe
Hack The Box (retired)
PortSwigger Web Academy
VulnHub / OWASP Juice Shop

Exploitations

Shortlist of exploitation notes and PoC sketches:

SQL Injection — UNION / ORDER BY methodology
XSS — reflected & stored payload patterns
File upload abuse & bypass techniques

Commands I Use Often

# nmap quick scan
nmap -sT -Pn -p 80,443 -sV --script=http-title,http-headers target

# ffuf directory brute force
ffuf -u https://target/FUZZ -w /usr/share/wordlists/raft-large-directories.txt -mc 200,301 -t 20