Cybersecurity · DFIR · Ethical Hacking

HelloI'm Liviu Bucel.

I investigate attacks, test systems and build practical security tooling.

Focused on threat research, digital investigation and infrastructure security — with projects that turn security data and operational problems into useful tools.

Threat analysisWeb securityIncident responseSecurity automation

View my work Contact me

// About me

Security first. Practical by default.

I like security work that ends with something concrete: a finding reproduced, an incident understood, a system hardened or a tool that makes the next investigation faster.

Profile

Liviu Bucel

Cybersecurity · DFIR · Ethical Hacking

What I care about

Understanding how attacks happen, preserving useful evidence, reducing attack surface and making technical findings reproducible.

InvestigationOffensive securityHardeningAutomation

Current focus

DFIR + practical security testing

I keep pushing deeper into incident response, network analysis, web testing, attack-path discovery and the tooling around them.

investigation.log

[+] capture network evidence

[*] reproduce attack path

[!] isolate root cause

[#] document remediation

Live project

Threat intelligence

Romania Cyber Monitor

Toolbox

Tools I actually use

Kali LinuxBurp SuiteWiresharkNmapPythonPowerShellCloudflare

// Selected security work

Projects built around real security problems

Live security project2026

Romania Cyber Monitor

A public cyber-threat monitoring project that collects, normalises and presents Romania-linked ransomware, breach, malware and exposure data.

Independent project

Threat research & engineering

Ransomware

Malware

Exposures

Security infrastructure2024

ZebraByte

Security-focused infrastructure and platform work spanning DNS, TLS, edge protection, hosting and operational hardening.

ZebraByte

Infrastructure & security

Security infrastructureProtected

EDGE

WAF · DDoS

DNS

DNSSEC · DMARC

TLS

ACME · HTTPS

OPS

Monitoring · hardening

Edge controls · certificate automation · secure hosting

Security automation2024

SSL Certificate Generator

An ACME automation project for domain validation, certificate issuance and deployment-ready TLS/SSL certificate packages.

Independent project

ACME / PKI automation

acme-client

$ request certificate example.com

→ creating ACME order

→ validating domain ownership

✓ challenge verified

✓ certificate issued

TLS package ready for deployment

// Experience & toolkit

From infrastructure support to practical security work

A technical path built around troubleshooting real systems, understanding how they fail and then moving deeper into security testing and investigation.

Practical toolkit

The tools matter less than knowing why you are using them.

I use a compact set of tools across offensive testing, investigation, infrastructure and automation — and keep the emphasis on reproducible evidence rather than tool collecting.

Offensive security

Reconnaissance, enumeration, web testing and attack-path validation.

Burp SuiteNmapKali Linux

Investigation & analysis

Network evidence, incident triage, digital-forensics fundamentals and threat analysis.

WiresharkWindowsLinux

Systems & infrastructure

DNS, TLS, hosting, edge controls and practical hardening work.

CloudflareDNSTLS/SSL

Automation

Small scripts and API-driven workflows for repeatable security tasks.

PythonPowerShellAPIs

ZebraByte

Technical Support Specialist

Apr 2022 — Jan 2024

cPanelDNSTLS/SSLWordPressCloudflare

Supported hosting, domains, email and client infrastructure while building a stronger security focus.

Worked on first-line technical support across hosting and web infrastructure, including DNS, email, SSL/ACME certificate workflows, WordPress and Cloudflare fundamentals.

Intact Media Group

IT Technician

Nov 2019 — Sep 2020

WindowsNetworkingWorkstationsEmail

Supported day-to-day IT operations across user devices, networking and workplace systems.

Handled practical IT support in a production environment, troubleshooting Windows workstations, network connectivity, email and everyday technical issues.

Independent Labs

Practical Cybersecurity Work

OngoingHands-on

Kali LinuxBurp SuiteNmapWiresharkPython

Hands-on work across reconnaissance, enumeration, web testing, network analysis and incident-response fundamentals.

Security labs and simulations are where I test assumptions, reproduce behaviour, collect evidence and practise documenting findings clearly.

// Security focus

The areas I keep going deeper into

A practical mix of investigation, offensive testing, infrastructure security and automation — without stock imagery pretending to be the work.

Digital Forensics & Incident Response

Evidence-driven investigation, network analysis, incident-response fundamentals and clear technical documentation.

WiresharkWindowsLinux

Ethical Hacking & Web Security

Practical testing focused on attack paths, exposed services, application behaviour and reproducible findings.

Burp SuiteNmapRecon

Threat Research & Monitoring

Collecting, normalising and interpreting public threat intelligence with careful source attribution.

OSINTThreat feedsAutomation

Infrastructure & Web Security

Security-focused infrastructure work spanning DNS, certificates, edge controls, hosting and web hardening.

CloudflareDNSTLS

Security Automation

Small tools and automation that reduce repetitive security work and make technical processes more reliable.

PythonPowerShellAPIs

// Contact

Have a security problem worth digging into?

I'm interested in cybersecurity, DFIR, security testing, technical research, and roles where I can investigate real systems and real incidents.

Contact me Request CV