Back to notes
Learn
All notes.
Things I had to sit with for a while before they made sense. I write them down so I don't forget how they work, and so future-me can skip the struggle.
career
What OSCP really taught me, and what I wasted time on
Jul 2026
web
OAuth 2.0 for testers: the flow, and the three things I check
Jan 2026
infra
NTLM authentication, and why it keeps coming back to bite you
Nov 2024
infra
Checking the security posture of an endpoint agent
Sep 2024
web
Browser-in-the-Browser: phishing that survives the address-bar check
Feb 2024
web