Internal - WordPress, Jenkins, and Docker All the Way to Root
The TryHackMe room "Internal" is a very good example of how realistic attack chains are built during internal
O.MG Cable - HID Injection From a Charging Cable
A small package arrived today, and it does not look like much: a USB-C cable and a tiny programming
Olympus - SQL Injection, an Overlooked Chat App and a Custom SUID Binary to Root
Some TryHackMe rooms teach you one technique and let you drill it until it sticks. Olympus is not one of
Sliver - Command and Control
There's a moment when a custom exploit script loads on a target machine and calls back. Not to
From Cheat Sheets to a Local AI: Building a Self-Hosted Red Teaming Assistant
A while back, I wrote about building a personal red teaming knowledge base on GitHub - a version-controlled collection of
Certified, Hired, and Recharged
It's been quite a while since my last post, and this time the silence was actually a deliberate
Relevant - Chaining SMB, IIS and Token Impersonation into SYSTEM
Windows environments are rarely compromised through a single vulnerability alone. In most real world scenarios, attackers chain together several smaller
A Small Life Update
It’s been quite a while since my last post, and I figured it was finally time to sit down
Corp Walkthrough - Kerberoasting
This room focuses on several common techniques used during Windows and Active Directory security assessments. The objective is to move
Project Approved: Building the Foundation
My final project topic has officially been approved by the Chamber of Commerce and Industry. The project, titled “Introduction of
Building a Personal Red Teaming Knowledge Base on GitHub
Alongside my main responsibilities, especially exam preparation and other ongoing commitments, I am currently working on a small side project
Current Situation, Priorities, and Project Progress
Over the past weeks, my learning routine has changed noticeably. While I am still highly interested in continuous hands-on