Brian

Writing is thinking. These are my notes made public.

You can follow my work on Github and find what I've been reading on my bookshelf.

Writings

• Container Security Basics
• Common Cloud Misconfigurations
• Cloud Shared Responsibility: What It Means in Practice
• Network Segmentation and Zero Trust
• MITRE ATT&CK Explained
• Incident Response: What Actually Happens
• SIEM and Log Analysis
• How Firewalls and IDS/IPS Work
• Pivoting and Tunneling
• Lateral Movement Techniques
• How Kerberos Works (and Gets Abused)
• Windows Privilege Escalation
• Linux Privilege Escalation
• Client-Side Attacks and Phishing
• Pass-the-Hash
• Password Attacks
• How Metasploit Works
• Server-Side Request Forgery (SSRF)
• IDOR: When Access Controls Fail
• Broken Authentication
• Cross-Site Scripting (XSS)
• SQL Injection
• SNMP: The Forgotten Attack Surface
• SMB Enumeration
• DNS Enumeration
• Nmap: A Practical Guide
• Passwords and How They're Stored
• How Public Key Infrastructure (PKI) Works
• Cryptography Explained Simply
• Ports and Protocols You Should Know
• How Networks Work
• Google Dorking
• QR Codes
• Understanding the Linux File System
• Kevin Kelly's Unsolicited Advice