Anlen Jeban
Offensive Security Researcher • Active Directory Red Team Specialist • Tool Builder
Hey, I’m Anlen Jeban, known across the offensive security community as AN1EN. I am a Computer Science engineer and security practitioner focused on adversarial attack simulations, Active Directory red teaming, and building tools that make complex security operations intuitive.
My primary operational ground is Active Directory and enterprise infrastructure compromise. I spend my time auditing and dismantling Windows domain architectures—hunting for misconfigurations in Active Directory Certificate Services (AD CS ESC1–ESC8), forging Kerberos tickets through AS-REP and Kerberoasting attacks, synchronizing credentials via DCSync, orchestrating stealth lateral movement, and escalating across trust boundaries all the way to hypervisor takeovers on VMware ESXi.
I am currently deep in active preparation for the Certified Penetration Testing Specialist (HTB CPTS). My daily work is concentrated on full-scope network penetration testing, multi-tier pivoting and tunneling with Ligolo-ng and Chisel, web application exploit chains, and writing commercial engagement-grade security assessment reports.
Beyond security assessments, I have a deep passion for software engineering and offensive automation. When I noticed recurring bottlenecks during network discovery, I engineered Tmap—a fast, zero-dependency network discovery and port enumeration framework equipped with an interactive terminal interface. To streamline engagement reporting, I developed SHADOW AI, an LLM-assisted penetration testing copilot that tracks session context and synthesizes structured audit reports automatically.
I hold credentials as an Active Directory Red Team Specialist (AD-RTS) and Certified Red Team Analyst (CRTA) through Cyberwarfare Labs, alongside IBM quantum-safe encryption fundamentals. In competitive CTFs, I have tackled over 55 laboratory machines on CyLab Security Academy and ranked 8th globally in the CloudSEK Hiring CTF.
Everything I publish adheres to responsible disclosure and rigorous ethical guidelines: only authorized and retired proving ground targets are documented. I regularly post technical post-mortems and full attack chains on Medium to give defenders and developers the visibility needed to remediate critical vectors before genuine threat actors discover them.