Posts

Think attacking AI is just Prompt Injection? HTB COAE showed me a whole other side of AI attacks.

I jumped into CCSP with zero cloud experience. I only wanted the badge and the stickers, but Cloud Security taught me a real lesson.

When AI turns from a tool into a target, what does pentesting look like? My one-season journey from using AI, to understanding it, to attacking it.

You don’t need a superhero mode to move forward. The real rhythm of a security engineer and mom who earned OSCP and CISSP in two years, between work and kids.

How do you switch from a hands-on hacker mindset to a manager’s one? Three months of CISSP prep took me out of my technical comfort zone.

Failed twice, studying while raising a child. How does a working mom walk the OSCP+ tightrope with so little time?

One open Introspection Query let me list the entire GraphQL schema. A real pentest case of a common but costly setup mistake.

One badly set cookie is enough for an attacker to pretend to be you. Meet the three lines of defense (Secure, HttpOnly, SameSite) and how to turn them on.

How does one string split by dots hold up the login for modern websites? Breaking down the three parts of a JWT, and the traps to avoid.

A switch hiding an open API? Starting from one scan alert, I turned off the hidden service on a NetGear M4300, step by step.