offensive security journey
Find the crack.
Pull the thread.
Own the system.
This is a journey into offensive security. Not a tutorial site, not a certification checklist. A raw, honest log of someone learning to think like an attacker. Expect walkthroughs of machines I managed to break into, and notes on topics I find worth understanding deeply. Systems have assumptions. Code has blind spots. Networks have gaps nobody documented. This is where the interesting work happens.
// latest posts
LLMs Can Be Hacked. Here's What I've Learned So Far.
Prompt injection, jailbreaks, data extraction, model manipulation. Notes from six months of experimenting with LLM security from a red team perspective.
Active Directory: Notes from Someone Who Just Got Schooled
I spent a month deep in Active Directory attacks. Kerberoasting, ASREPRoasting, BloodHound, Pass-the-Hash, DCSync. Notes from the other side of a long learning curve.
How I Stopped Underestimating Social Engineering
Voice cloning. Real-time deepfakes. AI that can impersonate your manager convincingly enough to fool you. This is not the future of phishing. It's the present.
The Post-Quantum Problem is Not a Future Problem
NIST finalized its post-quantum standards in 2024. Most organizations are not ready. The threat isn't hypothetical — harvest now, decrypt later is already happening.
AI Agents Are the New Attack Surface
I spent three weeks trying to get an AI agent to leak its system prompt. Eventually I succeeded. Here's what that taught me about a problem most security teams aren't taking seriously yet.
The Internet Has No Walls.|Only Doors You Haven't Tried Yet.
Before you break anything, you need to understand how it's built. A hacker's tour of the internet: from packets to ports, DNS to the three-way handshake.
Why I Break Things
From dismantling radios in 1983 to chasing root flags today. The unplanned education of someone who could never leave well enough alone.