A Linux privilege-escalation cheatsheet covering permission weaknesses, credential exposure, process memory, and container misconfigurations.

A comprehensive investigation into the Volt Typhoon APT simulation on TryHackMe, covering initial access, lateral movement, and stealth persistence techniques.

A practical guide to understanding obfuscated JavaScript through static and controlled dynamic analysis, defensive tooling, and safe investigation.

An introduction to DevOps, continuous integration, continuous delivery and deployment, CI/CD pipelines, tools, and benefits.

Writeups for PicoCTF 2025 web challenges covering Jinja2 SSTI, cookie decoding, unsafe eval, Pachinko, and secure email.

A walkthrough of Linux logging sources for SOC investigations, including syslog, authentication logs, Bash history, and auditd.

A TryHackMe walkthrough on vulnerability chaining, combining low-to-medium severity issues into a larger application-security impact.

A practical overview of web application penetration testing, safe practice labs, common tools, and responsible testing tips.

A TryHackMe walkthrough covering Grafana file traversal, SSH access, Kubernetes secrets, pod storage, and job output.

An overview of port forwarding and multi-hop pivoting in authorized security assessments.