Pick a series. Start at chapter one.
Each series is a set of posts meant to be read in order: setup first, then the techniques, then the harder stuff. From building a lab to breaking smart contracts.
All Series Available
Choose your path and start your learning journey in offensive security
Building the Offensive Security Playground: A Step-by-Step Guide
Set up a personal hacking lab on Proxmox: virtual machines, networks and the targets you will use in the other series.
Exploring API Security: A Practical Guide to Uncovering Vulnerabilities
REST and GraphQL from the attacker's side: enumeration, broken auth, mass assignment and BOLA, with Burp Suite and Postman.
Forging Valeris: Building a Rust CLI to Secure Docker & Kubernetes
Build log of Valeris, a Rust CLI that scans Docker (and soon Kubernetes) for misconfigurations: design, code, plugin architecture and the checks themselves.
Initiating Linux Binary Exploitation: A Beginner's Expedition into Code Manipulation
Linux binary exploitation from the start: assembly, stack overflows, format strings, shellcode and the mitigations that get in the way.
Navigating the Active Directory Maze: Unveiling Hacking Strategies
Active Directory from enumeration to domain admin: Kerberos, NTLM, credential theft and lateral movement with PowerShell, Mimikatz and BloodHound.
No More Enemies: The Battle for Inner Freedom
Notes on focus, discipline and purpose. The only series here that is not about breaking computers.
Open Source Web Hacking Mastery: A Junior's Guide to Methodical Penetration Testing
Web application testing with open-source tools like Nuclei and mitmproxy, practised on OWASP Juice Shop.
Python Prowess: Ethical Hacking Explorations for Security Enthusiasts
Python for offensive work: web exploitation, cryptography and pentest tooling, one script at a time.
Securing Android: An In-Depth Exploration
Android app security through the Damn Vulnerable Bank app: finding, exploiting and fixing common and less common mobile flaws.
Web3 Exploitation Fundamentals: Navigating Security in Decentralized Systems
Smart contract exploitation with Foundry and Hardhat: reentrancy, front-running, signatures, proxies and the defenses that actually hold.