// the find
s4vitar/s4vitar.github.io
Página web personal. Artículos sobre ciberseguridad, CTFs e investigaciones.
Personal security blog of s4vitar, a well-known Spanish-speaking penetration tester. Covers HackTheBox writeups, CTF techniques, OSCP/OSWP prep, and occasional original research like DICOM server exposure and WhatsApp protocol quirks. The audience is Spanish-speaking security practitioners working through certifications or CTF platforms.
The DICOM hospital exposure post is genuinely interesting original research — finding medical imaging servers on Shodan and documenting the attack surface is more useful than yet another HTB writeup. The bspwm configuration content has clearly resonated (65 forks) with the security community that runs tiling WMs. Posts are image-heavy and walkthrough-style, which is appropriate for the target audience learning hands-on techniques. The custom 'haxor' Jekyll skin shows some personality rather than using the Minimal Mistakes defaults wholesale.
Last post is from November 2020, last push March 2023 — this is effectively archived. The _site directory is committed alongside source, meaning the built output and templates are both in the repo with no .gitignore separation, which makes the diff history noisy and the repo size larger than it needs to be. Content is entirely in Spanish with no translations, which limits reach for the English-speaking security community despite the author having a significant YouTube following internationally. The videos subdirectory contains a full React app with node_modules excluded but package-lock.json committed — it's a half-finished video index that never shipped as part of the site.