https://vvnblog.com/en/posts/Recent content in Posts on Vivian's BlogHugo -- gohugo.ioenCopyright © 2026 Vivian All Rights Reserved.Wed, 08 Jul 2026 00:00:00 +0000https://vvnblog.com/en/posts/coae-exam/Wed, 08 Jul 2026 00:00:00 +0000https://vvnblog.com/en/posts/coae-exam/Think attacking AI is just Prompt Injection? HTB COAE showed me a whole other side of AI attacks.https://vvnblog.com/en/posts/ccsp-exam/Sat, 09 May 2026 00:00:00 +0000https://vvnblog.com/en/posts/ccsp-exam/I jumped into CCSP with zero cloud experience. I only wanted the badge and the stickers, but Cloud Security taught me a real lesson.https://vvnblog.com/en/posts/ai-red-teamer-learn/Mon, 16 Mar 2026 00:00:00 +0000https://vvnblog.com/en/posts/ai-red-teamer-learn/When AI turns from a tool into a target, what does pentesting look like? My one-season journey from using AI, to understanding it, to attacking it.https://vvnblog.com/en/posts/no-superhero-mode-2023-2025/Thu, 01 Jan 2026 00:00:00 +0000https://vvnblog.com/en/posts/no-superhero-mode-2023-2025/You don’t need a superhero mode to move forward. The real rhythm of a security engineer and mom who earned OSCP and CISSP in two years, between work and kids.https://vvnblog.com/en/posts/cissp-exam/Tue, 07 Oct 2025 00:00:00 +0000https://vvnblog.com/en/posts/cissp-exam/How do you switch from a hands-on hacker mindset to a manager’s one? Three months of CISSP prep took me out of my technical comfort zone.https://vvnblog.com/en/posts/oscp-exam/Mon, 28 Apr 2025 00:00:00 +0000https://vvnblog.com/en/posts/oscp-exam/Failed twice, studying while raising a child. How does a working mom walk the OSCP+ tightrope with so little time?https://vvnblog.com/en/posts/graphql-leak-info/Fri, 19 Jul 2024 00:00:00 +0000https://vvnblog.com/en/posts/graphql-leak-info/One open Introspection Query let me list the entire GraphQL schema. A real pentest case of a common but costly setup mistake.https://vvnblog.com/en/posts/cookie/Thu, 23 May 2024 00:00:00 +0000https://vvnblog.com/en/posts/cookie/One badly set cookie is enough for an attacker to pretend to be you. Meet the three lines of defense (Secure, HttpOnly, SameSite) and how to turn them on.https://vvnblog.com/en/posts/jwt/Thu, 11 Apr 2024 00:00:00 +0000https://vvnblog.com/en/posts/jwt/How does one string split by dots hold up the login for modern websites? Breaking down the three parts of a JWT, and the traps to avoid.https://vvnblog.com/en/posts/netgear-m4300/Thu, 13 Jul 2023 00:00:00 +0000https://vvnblog.com/en/posts/netgear-m4300/A switch hiding an open API? Starting from one scan alert, I turned off the hidden service on a NetGear M4300, step by step.https://vvnblog.com/en/posts/edl/Wed, 15 Mar 2023 00:00:00 +0000https://vvnblog.com/en/posts/edl/Still adding malicious IPs to your firewall one by one? EDL / EBL lets the firewall fetch the list on its own, so you get your time back for the work that matters.