My Penetration Testing Methodology, Explained
A walkthrough of how I approach an engagement — from scoping and recon to exploitation and reporting — and the lessons learned along the way.
Read more →🎯
Thoughts, write-ups and lessons from my journey in cybersecurity — penetration testing, blackbox testing, cloud security and the day-to-day of a product security engineer.
A walkthrough of how I approach an engagement — from scoping and recon to exploitation and reporting — and the lessons learned along the way.
Read more →How to map an unknown attack surface with zero internal knowledge, and why the attacker's perspective matters for real-world risk.
Read more →Practical steps to tighten identity and access management and avoid the misconfigurations that lead to cloud breaches.
Read more →Real examples of injection, broken access control and SSRF — how to find them and how to fix them.
Read more →My transition into security — the certifications that mattered (CEH, CySA+) and advice for anyone making the switch.
Read more →A template-driven approach to detection, triage and recovery that keeps teams calm under pressure.
Read more →I love talking security. Reach out with questions, ideas or collaboration proposals.