About

I’m Jan Bermejo Torán, a Cybersecurity student and pretty deeply involved in anything related to systems, networks and security.

Right now I’m mainly focused on the offensive side. I spend quite a lot of time on Hack The Box and TryHackMe, doing machines, trying techniques and learning by breaking things. I’m interested in understanding what’s behind a service, where it fails and how far I can get when something is misconfigured.

That’s precisely what I like about cybersecurity. It’s not just about knowing how to use a tool, but understanding what’s actually happening underneath. The more I learn, the clearer it becomes that there’s always another layer to understand.

What I’m up to

I’m currently studying a Higher Degree in Cybersecurity and, outside of class, I keep learning on my own.

My main focus is:

• 🛡️ Pentesting and ethical hacking
• 🌐 Web and network security
• 🐧 Linux and system administration
• 🔓 Privilege escalation on Linux and Windows
• 🔎 Enumeration and vulnerability analysis

I’m also interested in the defensive side, but my main focus is Red Team. After all, if you want to know how to protect something, it helps quite a bit to know how it can be broken first.

What I usually use

I mainly work with:

Linux · Python · Bash · Docker · Wireshark · Nmap · Arch Linux · Proxmox · Git · GitHub · Raspberry Pi · HTML5

I’m not particularly interested in using a tool just because everyone else is using it. If something interests me, I prefer to understand it, try it out and see how far I can take it.

And if there isn’t something that does what I need, there’s always the option of building it myself.

Servers and self-hosting

Another thing I really enjoy is building infrastructure on my own.

I’ve been messing around with Proxmox, servers, Raspberry Pi, Linux and self-hosted services.

I like having my own machines, configuring them my way and having control over what’s happening on them. Besides, building and maintaining your own services ends up teaching you quite a bit more than you’d expect.

One way or another, there’s always some problem that wasn’t planned for. And usually, that’s where you learn the most. I know what I’m talking about, and I use Arch btw…

GitHub

This is where I leave the projects and experiments I’m working on.

Some are tools I needed for something specific, others are small projects, and some are simply things I’ve made while learning.

Some of them:

• TERMSG
• PacketTracer-kde-Login-Fix
• Python Calculator (Fork)

The idea is to keep filling it up little by little with things I’ve actually built and used.

Outside of that

I’m interested in free software, privacy, self-hosting and technology in general.

I like knowing what I’m running, where it’s running and what it’s actually doing. I guess that’s part of the reason I ended up getting into Linux, servers and, eventually, cybersecurity.

I’m still learning, and there’s still a hell of a lot ahead.

But that’s precisely what makes it interesting.

I’ve always preferred to understand before executing.

Tools can open doors, but knowing why they open is what actually matters. That’s probably why I’ve never been particularly interested in the script kiddie path: copying commands from ChatGPT or a forum might give you the answer, but curiosity is what produces knowledge.

In the end, the goal isn’t just to have the result if you don’t know how you got there.