Search

Browse

• Cloud Security3

  • Google Cloud Certifications2

    • Google Cloud Cybersecurity: The Labs Made It Stick1
    • How I Passed Google’s Professional Cloud Security Engineer Exam Using AI1
  • MCRTA1

    • I Passed MCRTA - A Beginner Cloud Red Team Exam1
• Offensive Security25

  • CRTO25

    • 1. Red Team Engagements1
    • 2. Malware Essentials for Windows Payloads1
    • 3. Cobalt Strike Primer1
    • 4. AV and EDR Defence Evasion1
    • 5. Initial Access1
    • 6. Persistence1
    • 7. Post-Exploitation1
    • 8. Privilege Escalation1
    • 9. Elevated Persistence1
    • 10. Credential Access1
    • 11. User Impersonation1
    • 12. Discovery1
    • 13. Lateral Movement1
    • 14. Pivoting1
    • 15a. Kerberos Basics and Unconstrained Delegation1
    • 15b. Kerberos - Constrained Delegation1
    • 15c. Kerberos - Service Name Substitution1
    • 15d. Kerberos S4U2self Computer Takeover1
    • 15e. Kerberos Resource-Based Constrained Delegation1
    • 16. MSSQL Server1
    • 17. Domain Dominance1
    • 18. Active Directory Certificate Services (AD CS)1
    • 19. Forest and Domain Trusts1
    • 20. CRTO Reporting1
    • 21. AppLocker Policy Enumeration and Bypass Study1
• Web Security3

  • Labs & Write-ups2

    • Web LLM attacks1
    • Web LLM attacks, deeper into indirect prompt injection1
  • Testing Methods1

    • The Evolution of Penetration Testing1
• AI Security11

  • Models & Applications2

    • An interactive playground for LLM security testing1
    • Poisoning an AI assistant's memory1
  • Agents & Tool Access5

    • MCP security: when prompt injection gets a tool1
    • The MCP confused deputy problem1
    • MCP security labs: path bypasses and poisoned tool responses1
    • MCP Attacks on Xata and GitHub MCP: Read-Only Bypass and Issue Injection1
    • How Does an AI Agent Get Its Identity?1
  • Sandboxes & Control1

    • How to Sandbox an AI Agent: Linux Boundaries and Real Risks1
  • Experiments & Builds1

    • How to Build an Agentic Vulnerability Research Harness (Like the Pros)1
  • Incidents & Research2

    • Agent Swarms Are Here, and I Don't Think We're Ready1
    • Deeper into the OpenAI HACKING & HACKED!!1
• Mobile Security1

  • Application Security1

    • Building and breaking mobile applications1
• Systems & Architecture2

  • Infrastructure & Linux1

    • Why Kubernetes Exists: From One Container to Forty Servers1
  • Secure Development1

    • Building a DevSecOps Pipeline with GitHub Actions1
• Career & Life2

  • Security Career2

    • My first offensive security job1
    • Senior in 18 months, and a red team built from nothing1