Every skill here is backed by a published writeup — no self-rated proficiency bars. Counts link to the domains covered across 24 writeups on the blog.
UAF, tcache poisoning, ASLR/PIE bypasses, heap and stack exploitation on glibc targets.
5 writeupsAuth bypass, LDAP injection, MFA logic flaws, and business-logic exploitation.
4 writeupsClassic and applied crypto attacks — padding oracles, weak key recovery, protocol flaws.
3 writeupsKerberoasting, LLMNR poisoning, BloodHound-driven attack paths, DCSync.
2 writeupsMisconfiguration abuse and privilege escalation across cloud-hosted attack surfaces.
2 writeupsFirmware analysis, embedded protocol exploitation, physical/side-channel-adjacent challenges.
2 writeupsIndustrial control system protocol abuse and OT network attack paths.
1 writeupBoot2root and system-administration target analysis requiring binary/behavioral RE.
1 writeupArtifact recovery and timeline reconstruction from compromised system images.
1 writeupPrompt-injection and logic-abuse research against LLM-integrated applications.
1 writeupSmart contract vulnerability analysis and exploitation.
1 writeupRF and satellite-protocol challenge analysis.
1 writeupPlaceholder tool list — confirm which of these you actually use regularly, and I'll swap in the real toolkit.
Want the details behind these numbers? Every skill area links back to a full technical writeup on the blog.