>_ 0xDext3r

esc
0xDext3r
// whoami

0xDext3r

Bilal Tarfouss · Offensive Content Engineer II @ Hack The Box | OT Security | Red Team

I'm Bilal, aka 0xDext3r. Offensive Content Engineer II at Hack The Box, specializing in OT security. I build offensive labs and Academy content. Pentesting, hacking labs and digging into botnets and malware is what I'm about.

01

About

About This Site

This is where I share my cybersecurity projects, challenges and discoveries: HTB writeups, red team notes, tools and some cool hacking stories.

Who I Am

Offensive Content Engineer II at Hack The Box, specializing in OT security. Into red teaming, OT/ICS and digging into botnets and malware. When I'm not breaking stuff (ethically), I'm riding my sportbike or grinding CTFs. Stay safe and hack smart. Bilal~

02

Experience & Education

Hack The Box
Full-time · 1 yr 6 mos
Remote
  1. Offensive Content Engineer II
    Aug 2026 - Present
    OT security lab & Academy engineer
  2. Content Engineer
    May 2025 - Present
    Attacking Windows & Linux, lab and module content
Spinae
Internship · 4 mos
Ghent, Belgium · On-site
  1. ICS Security Consultant
    Feb 2026 - May 2026
    ICS/OT security consulting, lab development and EDR bypass research.
Howest University of Applied Sciences
Bachelor of Applied Computer Science
  1. Cyber Security
    2023 - 2026
    Graduated 2026
    View diploma
03

Licenses & Certifications

Hack The Box
CPTS Certified Penetration Testing Specialist Issued May 2026 Penetration TestingActive DirectoryPentest Reporting HTBCERT-B5B2DEE0BA ↗ CWES Certified Web Exploitation Specialist Issued Sep 2026 Web Application SecurityPenetration Testing HTBCERT-38022DC969 ↗
CJCA Certified Junior Cybersecurity Associate In progress
Industry Certifications
BSCP Burp Suite Certified Practitioner PortSwigger Issued Feb 2026 · Expires Feb 2032 Web Application Security 6E6B1E6FE664AE47 ↗ CyberOps CyberOps Associate Cisco Issued Mar 2026 Security ↗ ICS300 Industrial Control System Cybersecurity CISA Issued Jul 2025 ICSOT Security ↗ SAP Hack Your Device / IoT Pentesting RUN · European University Issued Feb 2025 IoT3 ECTS ↗
HTB ProLab
Alchemy Alchemy ProLab Issued Sep 2026 IT & OT network enumerationExploiting misconfigurations HTBCERT-BCBB84F113 ↗
HTB CTF Events
GCSB 2026 Global Cyber Skills Benchmark CTF 2026: Project Nightfall Issued May 2026 Top 5 HTBCERT-10A2FCC8BF ↗ HTS 2025 Hack The System: Bug Bounty CTF Issued Jun 2025 29th of 1323 teamsBug Bounty HTBCERT-C0AF59B04B ↗ GCSB 2025 Global Cyber Skills Benchmark CTF 2025: Operation Blackout Issued May 2025 18th of 796 teams HTBCERT-2AA353DDF8 ↗
CA 2025 Cyber Apocalypse CTF 2025: Tales from Eldoria Issued Mar 2025 HTBCERT-2F5294B6C6
CTF Competitions
i-Force CTF 1st place, first to finish all challenges i-Force
CSCBE 2025 Top 8 finalist Cyber Security Challenge Belgium Issued 2025 ↗
04

Public Content @ HTB

Machines and challenges I built and released publicly on Hack The Box.

Machine ★ 4.5
Helix
OT / ICS Medium

A medium Linux machine with an industrial control system (ICS/OT) theme.

Play on HTB ↗
Challenge ★ 4.4
Space Explorer
Web Very Easy

A lost space mission control system suffers from flawed authentication logic between its Sender and Receiver services.

Play on HTB ↗
05

Highlights

🏆
CCB Belgian Wall of Fame 2026
27 critical vulnerabilities reported under CVDP, CVSS 9.8 to 10.0. Acknowledged by the Centre for Cybersecurity Belgium.
CCB acknowledgement letter CCB ethical hacker swag
Wall of Fame ↗ LinkedIn post ↗
🚩
Global Cyber Skills Benchmark CTF 2026
Top 5 · Hack The Box
🛡️
EDR Bypass Research
Red team research at Spinae: built a custom Go loader from scratch, with randomized per-build output, to deliver a C2 agent past a live production EDR.
↗
🏰
HTB Fortresses
Pwned the Synacktiv and Context fortresses on Hack The Box.
Synacktiv Fortress completion
LinkedIn post ↗
06

Get in touch

Questions, collaboration, or a lab idea? My inbox is open.

0xdext3r@tarfouss.be