Posts
All the articles I've posted.
- elasticsearch 11 min read
Engineering Security ML with Elastic – Part 1: From Logs to Features
From Windows Event Logs to Behavioral Features: Preparing Elasticsearch Data for Anomaly Detection
Read article - typescript 3 min read
TypeScript for Pythonistas: A Guide to Building Red Team Tools
A comprehensive TypeScript guide for Python developers. Learn the fundamentals by comparing Python and TypeScript code, focused on offensive security tool development and MCP servers.
Read article - ai 6 min read
Model Context Protocol (MCP): Bridging the Gap Between AI and External Systems
An in-depth exploration of Model Context Protocol (MCP), the open standard revolutionizing how AI systems interact with external data sources and tools
Read article - docker 2 min read
Docker & Kubernetes Abuse Cheatsheet
Container escapes, docker.sock exploitation, K8s privilege escalation and misconfigurations for HTB, CTFs and cloud pentests
Read article - web 2 min read
Advanced Web Hacking & Pivoting Cheatsheet
SSRF, Request Smuggling, Prototype Pollution, WAF bypass, OAuth, SAML, advanced logic flaws and internal pivoting
Read article - web 2 min read
Web Exploitation Cheatsheet
SQLi, RCE, LFI/RFI, File Uploads, Deserialization, SSTI, Auth bypass and manual exploitation for HTB, CTFs and real-world pentests
Read article - windows 2 min read
Windows Privilege Escalation Cheatsheet
Fast techniques, tools, and commands for HTB, CTFs and OSCP-like environments
Read article - linux 1 min read
Linux Privilege Escalation Cheatsheet
Fast techniques, tools, and commands for HTB, CTFs and OSCP-like environments
Read article - smb 2 min read
SMB & RPC Enumeration Cheatsheet
Fast SMB, RPC and Windows service enumeration for HTB, CTFs and real-world AD pentests
Read article - web 2 min read
Web Attack Surface & Enumeration Cheatsheet
Discovery, fingerprinting, content discovery, parameter fuzzing, virtual hosts and technology mapping for HTB, CTFs and real-world pentests
Read article