A
~/blog

The blog

Tutorials, knowledge-base reference, cheat sheets, and the occasional war story.

Offensive Security
Offensive Security·Jan 8

Kerberoasting in 2026: What Still Works and What Doesn't

Kerberoasting was documented in 2014. It's 2026 and I'm still popping DA with it on

offsecactive-directoryred-team
Offensive Security
Offensive Security·Oct 30

Lateral Movement Techniques and How to Detect Them

Lateral movement is where most attackers spend the majority of their dwell time.

offseclateral-movementdetection
Offensive Security
Offensive Security·Aug 11

OSINT Techniques for Red Team Reconnaissance

The best intelligence I've gathered before an engagement came from sources the target

offsecred-teamrecon
Offensive Security
Offensive Security·May 19

Web App Recon Methodology: Building Your Attack Surface Map

I've found critical vulnerabilities through solid recon that others missed because they

offsecreconweb
Offensive Security
Offensive Security·Mar 28

Active Directory Attack Paths: From User to Domain Admin

Every enterprise AD environment I've tested has had at least one viable path from a

offsecactive-directorywindows
Offensive Security
Offensive Security·Jan 15

Linux Privilege Escalation: A Field Guide That Actually Sticks

I've done hundreds of Linux boxes on engagements and platforms. The admins who say

linuxprivescoffsec