Skip to content
Z3tra

Timeline

The path so far

Roughly chronological. Anything marked planned has not happened yet — this page is a record, not a wish list.

  1. 2023

    Discovering Linux

    Installed a distribution, broke it, reinstalled it, broke it again. Somewhere in that loop the filesystem, permissions and processes stopped being abstract and started being things I could reason about.

  2. 2023

    Getting into cybersecurity

    Started properly, roughly two years ago. What pulled me in was not the idea of hacking — it was wanting to know how applications actually work underneath.

  3. 2023

    First CTFs

    The first flags, mostly web. Slow, frustrating, and the fastest learning I have ever done. Also where I learned that reading someone else's write-up after solving it teaches you more than reading it before.

  4. 2024

    Building my own projects

    Started writing applications rather than only attacking them. Seeing a codebase from the developer's side changed how I look for vulnerabilities in everyone else's.

  5. 2024

    First internship at Oteria

    First exposure to how a security team actually operates: method before tooling, scope discipline, and documentation as part of the work rather than after it.

  6. 2024

    Building the lab

    A permanent environment to break things in — VMs, segmented network, containers for deliberately vulnerable targets. Being able to reproduce something safely turned out to matter more than any single tool.

  7. 2025

    Second internship at Oteria

    Focused on web application security: assessing applications, reproducing findings, and writing them up for the developers who would have to fix them.

  8. 2025In progress

    Hackuten

    Started the CTF platform. Challenges across several domains, isolated per-player environments, and the first project where hostile input is the product rather than a threat.

  9. 2026In progress

    Orbyte and Batelys

    Two projects with very different constraints: an encrypted messenger where the server is the adversary, and a lone worker safety app where availability is a safety property.

  10. 2026In progress

    Preparing the OSCP

    In progress. Methodology first, enumeration discipline second, and the exam as a deadline rather than the goal.

  11. 2026Planned

    Apprenticeship

    Looking for an apprenticeship in application security — the objective this whole site is pointed at.

  12. 2027+Planned

    OSWE

    The natural next step: white-box web exploitation, source code review, and turning reading a codebase into finding the bug.

  13. 2027+Planned

    First role as a security engineer

    Working on application security full time — building secure systems and breaking them with equal enthusiasm.