Sergio Muñoz

Offensive Security · Seville, Spain

I'm Sergio, an offensive security student based in Seville, Spain, currently in the final year of a vocational degree in network and systems administration (ASIR). My focus is penetration testing: Active Directory, web applications and wireless networks.

I hold the OSCP+, OSWP and BSCP, all earned in 2026. This blog is where I document how I prepared for each certification, what worked, what did not, and the techniques I pick up along the way.

  • BSCP badge

    PortSwigger · Oct 2026

    BSCP

    Burp Suite Certified Practitioner

  • OSWP badge

    OffSec · Sep 2026

    OSWP

    OffSec Wireless Professional

  • OSCP+ badge

    OffSec · Aug 2026

    OSCP+

    OffSec Certified Professional+ (also OSCP)

  • 130+machines rooted across Hack The Box and Proving Grounds
  • 273PortSwigger Web Security Academy labs, all of them
  • 100mystery labs before sitting the BSCP

Platforms

  • Hack The BoxActive Directory and assumed-breach machines
  • OffSec Proving Grounds PracticeBulk of my OSCP machine list
  • PortSwigger Web Security AcademyAll 273 labs completed, plus 100 mystery labs
  • WiFiChallenge LabsVirtualised Wi-Fi attack labs (WPA, WPS, Enterprise)

Courses and challenge labs

  • OffSec PEN-200Course, all module labs, Medtech, Secura and the OSCP A/B/C sets
  • OffSec PEN-210Wireless attacks course

// first posts coming soon