About

This is a notebook of offensive-security writeups, technique breakdowns and lab notes. Every piece tries to answer two questions: how does this actually work, and what stops it.

What you will find here

• Technique breakdowns — the mechanism behind a class of bug, without the hand-waving.
• Lab notes — things to try on systems you own, with the reasoning written down.
• Defensive notes — the smallest change that closes the gap, and how to detect an attempt.

Ground rules

Everything here is for education and authorized testing. Practice in your own lab or on platforms built for it. Testing systems without permission is illegal, and it is not what this site is for.