OffSec¶

Everything that didn't fit neatly into basics but deserves its own dirty corner of the site These are tools and techniques for authorized testing only — don't be that guy

• Reconnaissance — enumeration , OSINT , scanning , fingerprinting , finding the doors before you kick them in
• Vulnerability Analysis & Guides — CVEs , vuln scanning , assessment methodologies , knowing what breaks and why
• Active Directory — AD attacks , Kerberos abuse , privilege escalation , enumeration — where enterprise security goes to die
• Exploitation — PoC code , exploitation techniques , buffer overflows , weaponizing theory into practice
• Payloads & Wordlists — shellcode , payload generation , wordlist resources — the ammo you didn't know you needed
• Advanced Post-Exploitation — lateral movement , pivoting , privilege escalation , persistence — you're in , now what
• Android Pentesting — mobile app testing , Android security , tearing apart APKs like a cheap toy
• Tools & Automation — security tooling , automation scripts , CI/CD security , making the machine work for you
• Reporting & Writeups — pen test report templates , CTF writeups , documentation , because it didn't happen if you didn't write it down
• Learning & Certifications — training paths , cert prep , educational resources , stop reading and start doing

next -> Reconnaissance