My working penetration-testing notes: the stuff I actually run on an engagement, organised by category and by phase so nothing gets skipped. Tick things off as you go (it saves in your browser), search for a technique, and follow the links back to the deep-dive write-ups. These grow as I learn.
Field-tested Kubernetes testing notes, phase by phase: commands, what to look for, and the gotchas.
140 notes · growing Web & APIField-tested Web & API testing notes, phase by phase: commands, what to look for, and the gotchas.
26 notes · growing AI / LLMsField-tested AI / LLMs testing notes, phase by phase: commands, what to look for, and the gotchas.
185 notes · growingNotes land here once the first AD & Infrastructure write-up goes out.
Coming soonNotes land here once the first Cloud write-up goes out.
Coming soonNotes land here once the first Wireless write-up goes out.
Coming soonNotes land here once the first System Breakouts write-up goes out.
Coming soon
Inside