infrastructure_expertise = {
    'network_pentesting': {
        'reconnaissance': ['Nmap', 'Masscan', 'Angry IP Scanner'],
        'vulnerability_scanning': ['Nessus', 'OpenVAS', 'Qualys', 'Nexpose'],
        'exploitation': ['Metasploit', 'Empire', 'Cobalt Strike'],
        'wireless': ['Aircrack-ng', 'Wifite', 'Reaver', 'Bully']
    },
    
    'active_directory': {
        'enumeration': ['BloodHound', 'PowerView', 'ADRecon'],
        'attacks': ['Kerberoasting', 'AS-REP Roasting', 'DCSync'],
        'lateral_movement': ['Pass-the-Hash', 'Pass-the-Ticket', 'Golden Ticket'],
        'persistence': ['Shadow Credentials', 'AdminSDHolder', 'DCShadow']
    },
    
    'cloud_security': {
        'aws': ['S3 Misconfigurations', 'IAM Privilege Escalation', 'Lambda Security'],
        'azure': ['Azure AD Attacks', 'Storage Account Exposure', 'KeyVault Access'],
        'gcp': ['GCS Bucket Enumeration', 'Service Account Abuse', 'Firestore Security']
    },
    
    'container_security': {
        'docker': ['Container Escape', 'Image Vulnerabilities', 'Registry Security'],
        'kubernetes': ['Pod Security', 'RBAC Bypass', 'Secrets Management']
    }
}

post_exploitation_suite = {
    'windows': {
        'privesc': ['WinPEAS', 'PowerUp', 'Seatbelt', 'SharpUp'],
        'credentials': ['Mimikatz', 'LaZagne', 'Invoke-Mimikatz'],
        'persistence': ['SharPersist', 'WMI backdoors', 'Scheduled Tasks'],
        'lateral_movement': ['PsExec', 'WMIExec', 'SMBExec', 'CrackMapExec']
    },
    
    'linux': {
        'privesc': ['LinPEAS', 'LinEnum', 'Linux Exploit Suggester'],
        'credentials': ['mimipenguin', '/etc/shadow cracking'],
        'persistence': ['Cron jobs', 'SSH keys', 'Systemd services'],
        'lateral_movement': ['SSH tunneling', 'ProxyChains', 'Chisel']
    },
    
    'active_directory': {
        'enumeration': ['BloodHound', 'PowerView', 'ADExplorer'],
        'attacks': ['Kerberoasting', 'AS-REP Roasting', 'DCSync', 'Golden Ticket'],
        'tools': ['Rubeus', 'Impacket', 'CrackMapExec', 'evil-winrm']
    }
}

upcoming_certifications = {
    'Q1_2026': [
        'Offensive Security Certified Professional (OSCP)',
        'Certified Ethical Hacker (CEH) v12',
        'CompTIA Security+ (Scheduled March 2026)'
    ],
    'Q2_2026': [
        'AWS Certified Security - Specialty',
        'GIAC Web Application Penetration Tester (GWAPT)',
        'eLearnSecurity Web application Penetration Tester (eWPT)'
    ],
    'Q3_2026': [
        'Offensive Security Wireless Professional (OSWP)',
        'Burp Suite Certified Practitioner (BSCP)',
        'GIAC Exploit Researcher and Advanced Penetration Tester (GXPN)'
    ]
}

research_priorities = {
    'q1_2026': {
        'focus': 'API Security & GraphQL Vulnerabilities',
        'targets': ['REST APIs', 'GraphQL endpoints', 'gRPC services'],
        'goals': 'Find 5+ high-severity API vulnerabilities',
        'techniques': [
            'Introspection query abuse',
            'Batch query attacks',
            'Circular query DoS',
            'Authorization bypass in resolvers'
        ]
    },
    
    'q2_2026': {
        'focus': 'Cloud Security Misconfigurations',
        'targets': ['AWS', 'Azure', 'GCP', 'Serverless functions'],
        'goals': 'Identify cloud-specific attack vectors',
        'techniques': [
            'IAM privilege escalation',
            'S3 bucket enumeration',
            'Lambda function injection',
            'Container escape techniques'
        ]
    },
    
    'q3_2026': {
        'focus': 'Zero-Day Research',
        'targets': ['Popular open-source projects', 'Widely-used libraries'],
        'goals': '2-3 original vulnerability discoveries',
        'techniques': [
            'Fuzzing with AFL++',
            'Static code analysis',
            'Dependency chain analysis',
            'Binary reverse engineering'
        ]
    },
    
    'ongoing': {
        'focus': 'Business Logic Flaws',
        'methodology': 'Manual testing & creative thinking',
        'areas': [
            'Payment processing workflows',
            'Multi-step authentication flows',
            'Promotional code abuse',
            'Referral system exploitation',
            'Order modification attacks'
        ]
    }
}

class LinguisticCapabilities:
    """
    Multilingual proficiency enhances OSINT operations,
    social engineering testing, and international collaboration
    """
    
    languages = {
        'English': {
            'proficiency': '████████████████████ 95%',
            'level': 'C2 - Mastery',
            'use_cases': [
                'Technical documentation & vulnerability reports',
                'International security conferences',
                'Bug bounty report writing',
                'Code documentation & comments',
                'Client communication (Global)',
                'Security research papers',
                'CTF collaboration with international teams'
            ],
            'certifications': 'Business English - Cambridge Advanced',
            'accent': 'American/British neutral'
        },
        
        'French': {
            'proficiency': '████████████████████ 95%',
            'level': 'C2 - Native/Bilingual',
            'use_cases': [
                'Francophone security community engagement',
                'French client consulting',
                'CTF writeups in French',
                'Security awareness training (French markets)',
                'OSINT in French-speaking regions',
                'Collaboration with European security teams'
            ],
            'certifications': 'Native speaker proficiency',
            'regions': 'France, Belgium, Switzerland, Canada, North Africa'
        },
        
        'Arabic': {
            'proficiency': '█████████████████░░░ 85%',
            'level': 'C1 - Advanced',
            'use_cases': [
                'OSINT in Middle East & North Africa',
                'Regional threat intelligence gathering',
                'Arabic website security testing',
                'Local business consulting (MENA region)',
                'Cultural context in social engineering tests',
                'Arabic-language malware analysis'
            ],
            'dialects': 'Modern Standard Arabic + Tunisian dialect',
            'regions': '22 Arab countries coverage'
        },
        
        'Berber (Tamazight)': {
            'proficiency': '█████████████████░░░ 85%',
            'level': 'C1 - Advanced',
            'use_cases': [
                'Indigenous OSINT operations',
                'Cultural intelligence gathering',
                'North African regional expertise',
                'Specialized linguistic analysis',
                'Underrepresented community security'
            ],
            'dialects': 'Tunisian Berber variants',
            'regions': 'North Africa (Tunisia, Algeria, Morocco)'
        }
    }
    
    def operational_advantages(self):
        """
        Multilingual capabilities provide strategic advantages
        in cybersecurity operations
        """
        return {
            'osint_coverage': '80+ countries effectively analyzed',
            'social_engineering': 'Multi-cultural context awareness',
            'threat_intel': 'Access to non-English dark web forums',
            'client_base': 'Serve global markets without language barriers',
            'research': 'Access to multilingual security research',
            'compliance': 'GDPR, PCI-DSS in multiple languages'
        }

# Language proficiency enables comprehensive global security operations

content_portfolio = {
    'blog_posts': {
        'published': '15+ technical security articles',
        'topics': [
            'OWASP Top 10 exploitation guides',
            'Bug bounty hunting strategies',
            'Security tool development',
            'Penetration testing methodologies',
            'Real-world vulnerability case studies'
        ],
        'platforms': [
            'Personal blog (zwanski-store.pages.dev/blog)',
            'Medium security publications',
            'Dev.to community',
            'HackerOne community contributions'
        ]
    },
    
    'video_content': {
        'planned': 'YouTube security channel (Coming 2026)',
        'topics': [
            'Web application pentesting tutorials',
            'CTF walkthrough series',
            'Security tool demonstrations',
            'Live hacking sessions (authorized)',
            'Security awareness content'
        ]
    },
    
    'conference_talks': {
        'submitted': 'CFP submissions for 2026',
        'topics': [
            '"Advanced GraphQL Security Testing"',
            '"From Bug Hunter to Security Researcher"',
            '"Cloud Security: Common Misconfigurations"',
            '"Building Secure APIs from the Ground Up"'
        ],
        'target_events': [
            'OWASP Global AppSec',
            'Black Hat Arsenal',
            'DEF CON Demo Labs',
            'BSides (Local chapters)'
        ]
    }
}

class SecurityTestingBoundaries:
    """
    Ethical boundaries for all security testing activities
    """
    
    def __init__(self):
        self.authorized_activities = [
            "Penetration testing with written authorization",
            "Vulnerability assessment on owned assets",
            "Security research on bug bounty programs",
            "Code review of open-source projects",
            "Academic security research with IRB approval",
            "Red team exercises with proper agreements"
        ]
        
        self.prohibited_activities = [
            "Unauthorized access to computer systems",
            "Data theft or exfiltration",
            "Destructive attacks on production systems",
            "Social engineering without consent",
            "Malware distribution",
            "DDoS attacks",
            "Selling exploits to malicious actors",
            "Extortion or blackmail",
            "Testing without proper authorization"
        ]
    
    def verify_authorization(self, target, activity):
        """
        Always verify authorization before any security testing
        """
        if not self.has_written_permission(target):
            return False, "UNAUTHORIZED - Testing prohibited"
        
        if activity in self.prohibited_activities:
            return False, "ACTIVITY PROHIBITED - Ethical violation"
        
        return True, "AUTHORIZED - Proceed with testing"