Exhibit L · 04 Sept 2026
FiledSQL Injection
PortSwigger Web Security Academy notes on detecting and exploiting SQL injection, from UNION attacks to blind and out-of-band techniques
§ 02 — Evidence locker12 exhibits
Notes
Exhibit K · 18 Aug 2026 · Azure Security
FiledModeling Managed-Identity Privilege Escalation as an Attack Graph
A framework for treating Azure managed-identity abuse in hybrid Entra ID environments as a graph-reachability problem. I define the node and edge types, ground each edge in Azure RBAC semantics, show how my tool Fenrir uses the model to answer one question conservatively, and work through a case study in my own lab. Framework and systematization, not an empirical study.
Exhibit J · 15 Aug 2026 · Azure Security
FiledBuilding Fenrir: Automating the Azure Managed Identity Attack Path
A walkthrough of Fenrir, a Python CLI I built during a red-team internship that automates the Azure identity attack chain: tenant recon, an exploit-readiness verdict, managed-identity token theft through compute hosts, and tenant-wide post-exploitation.
Exhibit I · 11 Aug 2026 · Azure Security
FiledAzure Managed Identities: An Attacker's View of a Credential-less Design
A conceptual look at the Azure Managed Identity attack surface: how App Registrations, service principals, and managed identities map onto Active Directory concepts, why the IMDS token path turns a small foothold into tenant-wide exposure, and why measuring that blast radius is worth systematic tooling.
Exhibit H · 10 Jun 2026 · HTB Academy
FiledShells & Payloads
Master shell types, reverse shells, bind shells, payload crafting with MSFvenom, and web shells for penetration testing
Exhibit A · 26 Jan 2026
FiledBash Scripting Mastery
Advanced bash scripting techniques for security automation and penetration testing
Exhibit B · 26 Jan 2026
FiledFFUF Fuzzing Techniques
Web fuzzing cheat sheet covering directory, page, subdomain, and parameter fuzzing with FFUF
Exhibit C · 26 Jan 2026
FiledFile Inclusion Vulnerabilities
Comprehensive guide to understanding and exploiting local and remote file inclusion vulnerabilities
Exhibit D · 26 Jan 2026
FiledSecure File Transfer Methods
Various methods for transferring files securely in penetration testing scenarios
Exhibit E · 26 Jan 2026
FiledInfoSec Fundamentals
Core cybersecurity concepts and information security principles
Exhibit F · 26 Jan 2026
FiledLinux Internals & Process Management
Deep dive into Linux kernel internals, services, and process management techniques
Exhibit G · 26 Jan 2026
FiledServer-Side Attack Techniques
Exploration of server-side vulnerabilities and attack methodologies