Skip to content
View Lithos-hub's full-sized avatar

Block or report Lithos-hub

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
Lithos-hub/README.md
Carlos Segura García — arte ASCII del nombre Carlos Segura García (lithos@github) — Senior Software Engineer · Web Security · Pentesting · Málaga, Spain

lithos@github:~$ cat about.txt


Software engineer with 6+ years of experience building web applications, now expanding into offensive cybersecurity. Hands-on with foundational pentesting and security auditing, combining a developer's understanding of how systems are built with an attacker's mindset.

lithos@github:~$ cat development.txt


Since September 2020, I have worked continuously with Vue (2 & 3), Nuxt (2, 3 & 4), TypeScript, Vuex and Pinia and Vite. I also have experience with React and Next.js on the frontend, and Node.js and MongoDB/PostgreSQL on the backend. I have collaborated on international projects communicating in English, both directly with clients and with development teams. I am familiar with Jest, Vitest and Testing Library, designing unit and integration tests and applying BDD and TDD. I helped to create CI/CD pipelines for our applications and complex design systems.

lithos@github:~$ cat security.txt


I'm building a second specialty in offensive security, focused on web application pentesting. I've completed two full audits: a black-box assessment of a training lab and a white-box audit of a live production platform, with CVSS-scored findings and verified remediation. Coming from development, I read applications the way an attacker would, because I know where they usually cut corners.

lithos@github:~$ tail -f activity.log


- completed my first end-to-end security audits (black-box lab + white-box production platform)
- publishing every engagement as a public write-up on GitHub
- practicing on TryHackMe labs


lithos@github:~$ cat stack.txt


dev




security



lithos@github:~$ cat contact.txt


Portfolio — carlosseguragarcia.com LinkedIn — carlos-segura-garcia

Pinned Loading

  1. boe-analytics boe-analytics Public

    Web app to get summaries and analytics from the Spanish Official State Gazette (BOE) using Artificial Intelligence

    TypeScript

  2. iOrbit iOrbit Public

    App to view astronomic objects in 3D and relative information.

    TypeScript

  3. iAdopt-LandingApp iAdopt-LandingApp Public

    App to create AI chatbots made with Next 13, ChatGPT, MongoDB and Nodemailer.

    TypeScript 1

  4. infojobs-hackathon infojobs-hackathon Public

    My submission for the InfoJobs Hackathon 2023

    TypeScript

  5. pentest-portfolio pentest-portfolio Public

    Hands-on pentesting write-ups and audit reports (web apps, Active Directory, CTF-style labs) — recon to exploitation to remediation.

  6. iShop iShop Public

    Fake E-commerce App made with Vue 3, Vite and Pinia

    Vue 1