RANK
Top 1%
Hack The Box
Global top-1% ranking · 160 targets compromised.
Junior Cybersecurity Specialist · HTB Top 1%
Hello! I'm Tohirov Fazliddin
I'm Fazliddin Tohirov — a junior cybersecurity specialist focused on offensive security — web application and network. Ranked HTB Top 1%, 1st place at Cyber Guard CTF 2026, and author of the CyberZeroX C2 framework.
OPEN TO JR ROLES
Fazliddin Tohirov
Jr Cybersecurity Specialist
// profile
Offensive security, taught by doing.
I'm a junior cybersecurity specialist focused on offensive security — web application and network security. My work is hands-on: real lab environments, real targets I'm authorized to attack, and a methodology I refine on every box — pursuing a B.Sc. in Information Security at the National University of Uzbekistan (2023–2027).
I completed professional offensive-security training at Haad TC and built CyberZeroX, a custom Command & Control framework. I'd rather find the flaw than read about it.
Web App SecurityNetwork PentestActive DirectoryOSINT
BaseTashkent, UZ
StatusOpen to jr roles
EducationNUUz · InfoSec 2023–2027
Active sinceJan 2024
~ a look at the workflow
fazliddin@kali: ~/whoami
$whoami
Tohirov Fazliddin
$cat role.txt
Jr Cybersecurity Specialist · Offensive Security
$cat focus.txt
Web AppSec · Network · OSINT · Post-exploitation
$echo $RANK
HTB_TOP_1_PERCENT
$cat status.txt
AVAILABLE_FOR_OPPORTUNITIES
$█
The arsenal
The tools I reach for.
ReconExploitationPost-exploitation
A track record, not a promise.
160
Targets compromised on HTB
Top 1%
Global rank, Hack The Box
6
Certs & competition wins
2024
Hunting since
~ experience
Where I'm sharpening it.
Junior Cybersecurity Specialist
Self-study · Independent practice
- Hands-on penetration testing across lab environments and authorized targets
- Finding and analysing vulnerabilities in web applications
- Working with network and information-security fundamentals
- Applied pentesting practice built on the Haad TC course
- Continuously sharpening ethical-hacking skills
core skills
Kali LinuxIntermediate
NmapIntermediate
OSINTIntermediate
Network SecurityIntermediate
Penetration TestingIntermediate
Web App SecurityIntermediate
Bash / ShellIntermediate
PythonBeginner
Performance & security
Learning to find the flaw before the attacker does.
Encryption
Offensive testing
I attack like a real adversary — web, network, Active Directory, OSINT — to surface what automated scanners miss.
Encryption & hardening
Secrets stay secret: sound cryptography, key handling and configuration hardening, reviewed end to end.
Performance-aware
Security that never slows you down — remediations that keep the application fast, stable and resilient.
My Projects
CyberZeroX — Custom C2 Framework
A Python-based Command & Control framework I built for authorized red-team research. Real-time web dashboard over Flask + Socket.IO for managing client sessions, obfuscated comms (XOR + Base64), and a study of persistence and post-exploitation from the operator's seat. Educational & authorized testing only.
PythonC++FlaskSocket.IOLinuxNetworking
Hack The Box — Top 1% Globally
Ranked in the top 1% of players worldwide on Hack The Box. 160 targets compromised across web, network, and Active Directory privilege-escalation paths. The ranking is the receipt — the methodology behind it is the point.
Cyber Guard CTF 2026 — 1st Place
First place at the Cyber Guard CTF 2026, hosted by the International Islamic Academy of Uzbekistan. Plus 2nd place 'Best Creative Idea' at the university startup competition — offensive security and building, side by side.
// demos
Seen in action.
Short recordings from the lab and the stage — the framework running, and the ideas behind it.
C2 Framework
CyberZeroX — Full Walkthrough
The complete CyberZeroX walkthrough — building a client session, driving the operator dashboard, and running an authorized lab scenario end to end.
C2 Framework
CyberZeroX — Red Team Demo
A walkthrough of CyberZeroX, my Python-based Command & Control framework, driving an authorized lab scenario end to end from the operator dashboard.
Speaking
AI Master — Talk
A session on applied AI — breaking down where the tooling actually helps in real offensive-security and engineering workflows, recorded live.
// credentials
Earned, not collected.
CERT
HPTC
Haad TC
Haad Penetration Tester Certificate.
CERT
CRTA
Certified Red Team Analyst
Adversary emulation & red-team methodology.
CERT
CRT-ID
Red Team — Infra Dev
Red-team infrastructure & intrusion detection.
1st
Cyber Guard CTF 2026
Hosted by the Intl. Islamic Academy of Uzbekistan
2nd
Best Creative Idea
University startup competition