root@boce:~# whoami

Julius Boce

root@boce:~# role

about

root@boce:~# cat about.md

Cybersecurity Consultant and hands-on red teamer with corporate penetration testing experience. I uncover critical vulnerabilities — from web and network flaws to Active Directory misconfigurations — and help organizations prioritize and remediate them before they can be exploited. Certified offensive security professional and AD Red Team Specialist. I help organizations stay ahead of real threats, one vulnerability at a time.

Recognized by the Department of Information and Communications Technology (DICT) as Cybersecurity Professional Category 2: Intermediate.

OWASP Top 10

Web & API security

Active Directory

Red team & AD exploitation

C2 Frameworks

Havoc, Sliver

skills

$ Web Application Security (OWASP Top 10)$ SQL Injection & XSS$ Burp Suite$ API Security (REST, BOLA/IDOR, JWT, SSRF)$ Linux Privilege Escalation$ Container Escape$ System Enumeration$ Network Pivoting & SSH Tunneling$ Proxychains / Nmap$ Active Directory Exploitation$ Certificate Services$ Exchange Attacks$ Lateral Movement & Persistence$ ESXi Red Ops$ Data Exfiltration$ Metasploit$ OSINT$ Python / Bash / PowerShell$ Report Writing$ Cybersecurity Assessment$ Vulnerability Assessment$ Risk Assessment$ Risk Management Framework$ Threat Analysis$ Network Security$ Intrusion Detection (IDS)$ SIEM$ Information Assurance$ Information Security$ Information Systems$ C2 Frameworks (Havoc, Sliver)$ Caido$ Hackbar

experience

$ Jan 2026 - Present — Cybersecurity Consultant @ 8boxSolutions Inc.

  • >Led penetration tests across web applications, APIs, and internal networks — uncovering critical vulnerabilities including SQL injection, broken access control, business logic flaws, and other security misconfigurations with potential financial or operational impact.
  • >Provided PoC-backed reports and actionable fixes that closed high-risk gaps before exploitation.
  • >Recommended secure-coding and hardening measures mapped to industry frameworks (OWASP, NIST).

capabilities

$ Web Application Testing

OWASP Top 10, business-logic flaws, auth bypass, and injection attacks against live apps.

$ API Security

REST/SOAP abuse, JWT attacks, BOLA/IDOR, mass assignment, and SSRF.

$ Active Directory

AD exploitation, Kerberoasting, lateral movement, and persistence in Windows domains.

$ Internal & Network

Network pivoting, segmentation bypass, and internal lateral movement to domain dominance.

$ Red Team Operations

C2 frameworks (Havoc, Sliver), evasion, and end-to-end adversary simulation.

$ Reporting & Remediation

PoC-backed findings, risk-rated reports, and actionable fixes that close gaps fast.

credentials

Red Team

coap.png
Certified Offensive API Pentester (COAP)
[ verify ] →

Certified Offensive API Pentester (COAP) · Appkademiya

cnps.png
Certified Network Pivoting Specialist (CNPS)
[ verify ] →

Certified Network Pivoting Specialist (CNPS) · Appkademiya

cles.png
Certified Linux Exploitation Specialist (CLES)
[ verify ] →

Certified Linux Exploitation Specialist (CLES) · Appkademiya

cwpt.png
Certified Web Penetration Tester (CWPT)
[ verify ] →

Certified Web Penetration Tester (CWPT) · Appkademiya

ad-rts.png
Active Directory Red Team Specialist (ADRTS)
[ verify ] →

Active Directory Red Team Specialist (ADRTS) · Cyberwarfare Labs

ethical-hacker.png
Ethical Hacker
[ verify ] →

Ethical Hacker · Cisco

av-edr-evasion.png
AV/EDR Evasion Practical Techniques
[ verify ] →

AV/EDR Evasion Practical Techniques · Red Team Leaders

Blue Team

google.png
Google Cybersecurity Professional Certificate
[ verify ] →

Google Cybersecurity Professional Certificate · Google / Coursera

ccp.png
Certified Cybersecurity Professional (CCP)
[ verify ] →

Certified Cybersecurity Professional (CCP) · Appkademiya

paloalto.png
Certified Cybersecurity Practitioner
[ verify ] →

Certified Cybersecurity Practitioner · Palo Alto Networks

badges

dict-cyberpro-badge.pdf
Badge

DICT Cybersecurity Professional Category 2: Intermediate

DICT Cybersecurity Bureau

credly://906c3532-876f-4b6b-ad84-fa2fd7d32693

Ethical Hacker

Cisco

credly://55a3c9d7-901e-4d62-8a56-cfca00717c12

Google Cybersecurity Professional Certificate V2

Google / Coursera

credly://f08ec350-e3b2-4d70-a72d-0274678646f3

Cybersecurity Essentials

The Linux Foundation

root@boce:~# ./contact.sh

Let's work together

I'm always open to new consulting engagements and opportunities. Feel free to reach out — I usually reply within a day.