July 2026
4 postsLearning to Think Operationally
At some point I got tired of doing standalone boxes. I wanted to get comfortable with real C2 frameworks like Sliver and Havoc, learn how to pivot properly with ligolo-ng, and …
A Personal RAG System for Offensive Security Knowledge
Throughout engagements, specifically in Active Directory environments, I kept running into the same wall. The tools do so much of the heavy lifting that it becomes easy to lose …
Walking Past Defender
Introduction When it came to practice, I hardly found what I was looking for. Most writeups and blogs on stager development and Defender evasion put everything into complex …
How Defender Actually Works
Introduction At Ingehack, I spent way too long blindly throwing obfuscated tools at a target. Change a string here, re-encode there, try a different obfuscator, run it again. …
March 2026
3 postseBPF Dive
Ever wanted to run your own code inside the Linux kernel without writing a kernel module, without rebooting, and without breaking everything? That’s eBPF. This post is a …
Self-hosted VPN
Instead of relying on a commercial VPN provider, I wanted to see how far I could get by building my own on a VPS. The goal was simple: connect my laptop and phone over WireGuard, …
eJPT: Exam Guide
I passed the eJPT with 90%. I didn’t purchase the INE training bundle, so I won’t be walking through the exam itself, that’s against the rules and I didn’t …