# Глеб Черкасов

Глеб Черкасов is a remote worker on Himalayas, Self-Hosted VPN Service at Personal Project, based in Germany.

Source: https://himalayas.app/@0009407

```text
Cybersecurity student seeking a penetration testing role in Germany, with PNPT hands-on experience compromising Active Directory environments.
```

| Detail | Value |
| --- | --- |
| Availability | Looking for a job |
| Location | Germany |
| Authorized to work in | Germany |
| Salary expectations | 30k+ USD |
| Job categories | Penetration Tester, IT Security Analyst, SOC Analyst |
| Skills | Penetration Testing, Active Directory, Active Directory Attack Chains and Exploitation, Kerberos Relay, Delegation RBCD, Active Directory Certificate Services (ADCS), Windows Privilege Escalation, Linux Privilege Escalation, SMB Enumeration, LDAP Enumeration, MSSQL Exploitation, Blind SQL Injection, File Upload Bypass, Pivoting, Post Exploitation |
| Portfolio | https://github.com/GLEB23E |
| LinkedIn | https://linkedin.com/in/gleb-cherkasov-0504b843a |
| GitHub | https://github.com/GLEB23E |

## What I'm looking for

```text
I’m seeking a Werkstudent role in penetration testing, IT security, or a SOC in Germany. I’m available 20 hours per week.
```

## About

```text
In my PNPT simulated penetration test engagement with TCM Security, I assessed an Active Directory environment, pivoted into the internal network, and escalated to full domain privileges. I delivered a professional penetration-test report and passed a live, client-style debrief.

Through ongoing Hack The Box labs, I’ve practiced Active Directory attack paths, including RBCD abuse, AD CS enumeration, and Kerberos relay. I also designed and operate a self-hosted VPN service with a Python Telegram-bot front end and a WireGuard backend.
```

## Experience

### Self-Hosted VPN Service (current)

Personal Project

```text
Designed and operate a self-hosted VPN service with a Python Telegram-bot front end and a WireGuard backend. Responsible for Linux server administration, deployment, and user provisioning.
```

Skills: Python, WireGuard, Linux, Server-Administration, Deployment, Telegram-Bots

### Active Directory Attack Labs (current)

[Hack The Box](https://himalayas.app/companies/hack-the-box)

```text
Compromised multiple Active Directory-focused machines end-to-end, from enumeration to domain takeover, including LDAP credential extraction, RBCD abuse, AD CS enumeration, DNS-record injection, and Kerberos relay.
```

Skills: Active-Directory, LDAP, RBCD, AD-CS, Kerberos, DNS, Penetration-Testing, BloodHound, Impacket, NetExec

### Cybersecurity Student

TCM Security. Jan 2026 - Dec 2026

```text
Completed a five-day simulated penetration test engagement against an Active Directory environment, performing external compromise, pivoting, and domain privilege escalation. Delivered a professional penetration test report.
```

Skills: Active-Directory, Penetration-Testing, Nmap, Burp-suite, BloodHound, Impacket, NetExec, Metasploit, Hashcat, Wireshark, Python, BASH, SQL

### Web Development Projects

[GitHub](https://himalayas.app/companies/github)

```text
Built and published multiple front-end projects using React and Next.js. Source code is available on GitHub.
```

Skills: React, Next.js, JavaScript, TypeScript, Git

## Education

### Studienkolleg ESKW

Studienkolleg, Technical Track (T-Kurs). 2026 - Present

```text
University-preparatory program with a technical/engineering focus, qualifying for admission to German universities.
```

### TCM Security

Practical Network Penetration Tester (PNPT), Penetration Testing

```text
Earned the Practical Network Penetration Tester (PNPT) certification.
```

### School No. 654

Secondary Education, IT-focused specialist track

```text
Completed secondary education with an IT-focused specialist track and mathematics-focused track through grade 9.
```

### Russia

Computer Operator Certificate, Computer Operations

```text
Computer Operator Certificate with foundations in SQL and server administration/maintenance.
```

### Yandex

Python Programming Course, Programming

```text
Completed a Python programming course.
```

### Udemy

React & Next.js Web Development Course, Web Development

```text
Completed a React & Next.js web development course.
```

## Tech stack

- Next.js
- React
- JavaScript
- Python
- Wireshark
- Linux
- Windows
- TypeScript
- Git
- SQL
- Burp Suite
- Nmap
- Metasploit
- Bash
- WireGuard

To contact Глеб, message them from this profile with a Himalayas employer account: [Hire on Himalayas](https://himalayas.app/hire).

## People also viewed

- [Walid Lombarkia](https://himalayas.app/@walidlombarkia): Security Lab System and Application Security, University of Passau
- [Pornima Shete](https://himalayas.app/@pornimashete): Cybersecurity Analyst – Virtual Job Simulations, Mastercard, AIG, and Deloitte – Forage
- [Sahil Raja](https://himalayas.app/@sahilraja1): Cyber Security Specialist, Confidential
- [Deborah Esposito](https://himalayas.app/@deborahesposito): Legal Advisor Intern, ADRA Brazil
- [Rami Ben Fredj](https://himalayas.app/@ramibenfredj): Working Student, Software Developer, GroupM
- [Rotimi User](https://himalayas.app/@rotimiuser): Security Analyst, Duskbeacon
- [hashar mujahid](https://himalayas.app/@hasharmujahid): Penetration Testing Engineer, Trillium Information Security Systems
- [Ridwan Popoola](https://himalayas.app/@ridwanpopoola): Cybersecurity / Penetration Testing, Independent
- [Thomas Henning](https://himalayas.app/@thomashenning): IT Security Consultant, Cassini Consulting AG
- [Bharath User](https://himalayas.app/@bharathuser7): Werkstudent Cybersecurity Manager, European Commodity Clearing