Cloud Security S3 Bucket Misconfiguration and Data Exposure
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
enumeration
Cloud Security 
Tools & Defense Nmap Mastery: Service Discovery and NSE Scripting
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Active Directory LDAP Enumeration Techniques: ldapsearch and windapsearch
A practical guide to enumerating Active Directory over LDAP with ldapsearch, windapsearch, and bloodyAD, plus blue-team defenses.
Active Directory SMB Enumeration and Null Session Exploitation
A practical guide to enumerating SMB and abusing null sessions with enum4linux-ng, smbclient, rpcclient, and RID cycling.
Windows Privesc Practical Windows Enumeration with winPEAS
A hands-on guide to running winPEASx64 for Windows privilege escalation enumeration, with defensive countermeasures.
Linux Privesc Practical Linux Enumeration with LinPEAS
A hands-on guide to running LinPEAS for fast Linux privilege escalation enumeration, reading its output, and defending against it.
Linux Privesc Linux Enumeration Cheat Sheet for Privilege Escalation
A practical Linux post-exploitation enumeration cheat sheet covering id, uname -a, sudo -l, SUID hunting, and process inspection.
Cloud Security AWS IAM Privilege Escalation Paths: From Low-Priv Credentials to Account Takeover
A practical look at common AWS IAM privilege escalation paths, PoC commands, and the blue-team controls that shut them down.
Cloud Security Attacking and Securing Amazon S3: Buckets, Policies, and Presigned URLs
A practical guide to enumerating, exploiting, and hardening Amazon S3 buckets, ACLs, policies, and presigned URLs.
Mobile API OSINT Subdomain Enumeration and Attack Surface Mapping with Amass, Subfinder, and httpx
A practical recon workflow chaining amass, subfinder, httpx, and ffuf to map an organization's external attack surface.