Hey, I’m
TheCyberGeek.

I’m Matthew Bach, also known as TheCyberGeek. Coach, Staff Content Engineer at Hack The Box, and security researcher.

At Hack The Box, I coordinate the weekly releases of vulnerable content, manage automations across a range of content projects, and help resolve issues the community encounters with weekly machines. I also contribute to CTF content and work with our team to design and construct advanced threat simulations that demonstrate how attackers exploit vulnerabilities, misconfigurations and human error to compromise targets.

These realistic scenarios connect weaknesses across multiple stages of an attack, helping both red and blue teamers build strong foundations in attacking and defending systems and their components. I take pride in educating the security community through my content, making complex techniques approachable and giving learners practical opportunities to understand how attacks work and how to defend against them.

A practical example of this work is Zephyr Pro Lab, which I co-created with Daniel Morris (dmw0ng) for Hack The Box. Zephyr simulates a corporate network where learners investigate Active Directory weaknesses, escalate privileges and move across trust boundaries. It brings the principles behind advanced threat simulations into a realistic environment for practising an engagement from initial access through to wider compromise. Explore Pro Labs on Hack The Box ↗

Alongside content engineering and coaching, I research vulnerabilities and create machines and challenges for the security community. At the time of writing, I have created 35 machines on Hack The Box’s main platform, including Postman, Schooled, Monitors and Stacked, alongside published CVE research. Building these experiences brings together the parts of security I enjoy most: investigating systems, understanding why they fail, and making that knowledge useful to others.

I hold a BSc in Computer Science and a first-class honours master’s degree in Cyber Security and Human Factors. I have also earned OSCP, CRTP, CRTE, CWES and CPTS certifications. This personal lab brings together my research and archived writeups, preserving the original dates and technical context of the work. Keeping it Geeky!