Hi, I'm Emmanuel

I'm

Hello! I'm Emmanuel Camacho, passionate about offensive cybersecurity and secure backend development.

I am currently in a stage of continuous learning, deeply exploring the world of ethical hacking, penetration testing, and automation of tools for Linux environments.

I specialize in vulnerability analysis, designing custom solutions, and implementing security best practices. Although I am still expanding my knowledge in this vast field, every day I strengthen my skills by participating in labs, CTF platforms, and audits in controlled environments.

🔒 “My goal is to create more secure systems through a deep understanding of their flaws.”

CONTACT

Contact Me

Professional Development

2021

UNIVERSITY OF COLIMA (SOFTWARE ENGINEERING)

Currently in the final stage of my degree, focused on backend development and agile methodologies. Throughout my studies, I have gained practical experience in Linux environments, relational databases (MySQL and PostgreSQL), Docker containers, and web development fundamentals with HTML, CSS, and JavaScript.

I have also worked with tools such as basic Node.js, and game development engines like Unity and Godot. My education includes solid knowledge of software development life cycles, object-oriented programming, digital systems, and software engineering principles.

(Estimated graduation: July 2025)

2024

Self-taught Entry into Cybersecurity

Focus: ethical hacking, OWASP vulnerability testing, and pentesting in controlled environments.

  • Platforms: HackTheBox, TryHackMe, PortSwigger Labs.
  • Tools: Burp Suite, Nmap, SQLmap, Linux.
  • Studies: technical documentation, CVEs, blogs, and practical courses.
2024

Social Service - Distance Education Directorate (EDUC)

Role: Applied IT security for an educational platform.

  • Technical audits of EDUC functionalities.
  • Vulnerability testing: XSS, IDOR, misconfigured JWT.
  • Use of Burp Suite, Postman, OWASP Testing Guide.
2025

Professional Internship – Distance Education Directorate (EDUC)

Role: Cybersecurity analysis and testing on the EDUC platform.

  • Technical audits of APIs and critical functionalities.
  • Vulnerability testing: SQL Injection, IDOR, XSS, JWT.
  • Implementation of automated tests with Postman and Newman.
  • Preparation of technical reports with findings and recommendations.

Services

🔐 Ethical Hacker

Identification and exploitation of vulnerabilities in controlled environments, with proficiency in tools such as Burp Suite, Nmap, SQLmap, and Dirb. Hands-on experience on platforms like TryHackMe, HackTheBox, and PortSwigger Labs. Familiar with the OWASP Top 10 and offensive testing methodologies. Basic knowledge of CVEs and common attack vectors.

🧪 Software Tester

Execution of manual and semi-automated tests on APIs and web platforms. Use of Postman and Newman for functional, regression, and basic security validation. Test design based on critical system paths. Knowledge of JWT, XSS, IDOR, CSRF, and common misconfiguration errors. Preparation of reports with findings and technical suggestions.

🛠 Backend Developer

Development of REST APIs using Node.js, management of relational databases (MySQL, PostgreSQL), and backend security principles. Familiar with token-based authentication, access control, and business logic. Use of Docker for portable environments and backend service structuring. Application of best development practices and version control with Git.

🔧 Other

Knowledge in HTML, CSS, JS, responsive design, and semantic structure. Basic experience in Linux systems, bash commands, and local server management. Game development in Unity and Godot as personal projects. Mastery of concepts such as software life cycle, agile methodologies, and technical documentation.

🎓 Certifications & Awards

Certificado Terrabyte Academy

API Hacking

Issued by: Terrabyte Academy

Date: February 5, 2025

ID: oo8tkfs57d

View Certificate
Certificado Santander Open Academy

Introduction to Emerging Technologies

Issued by: Santander Open Academy

Date: July 31, 2024

ID: 1t8njtssid

View Certificate
THM-Pre-Security-Learning-Path

THM Pre-Security Learning Path

Issued by: TryHackMe

Date: May 24, 2025

ID: THM-59VQQ5ZCES

View Certificate
THM-CYBERSECURITY-101

THM Cybersecurity 101

Issued by: TryHackMe

Date: Jun 11, 2025

ID: THM-LM7KF5TRST

View Certificate
Python Introduction

Python Introduction

Issued by: Santander Open Academy

Date: Jun 19, 2025

ID: OA-2025-0619001255061

View Certificate

Portfolio

📁 Projects

Calculator 2.0

Calculator 2.0

BlackBox Testing

BlackBox Testing

Data Structure Activities

Data Structure Activities

🧪 Labs

Exploiting XXE to Perform SSRF attacks

Exploiting XXE to Perform SSRF attacks

JWT Auth Bypass via Algorithm Confusion with No Exposed Key

JWT Auth Bypass via Algorithm Confusion with No Exposed Key

SQLi Bypass XML Encoding

SQLi with Filter Bypass via XML Encoding

💻 Scripts

My Custom Kali Setup

My Custom Kali Setup

Password Generator

Account Creation Practice

Practica Operaciones

Operations Practice

My Documents

Knowledge Repository

Personal technical documentation on offensive cybersecurity, analysis tools, Linux commands, OWASP Top 10, testing in controlled environments, and more.

  • 🛡️ Pentesting in APIs and web
  • 🔧 Tools: Burp, ZAP, Metasploit
  • 🧪 Practical labs
  • 💻 Essential Linux commands
  • 📚 OWASP Top 10 explained
  • 🔍 Analysis of common vulnerabilities
View Full Guide

📅 Last updated: May 2025

Knowledge Base