Concepts
12 min
Understanding Heap Use-After-Free Vulnerabilities
A deep dive into heap UAF vulnerabilities - how allocators manage memory, how UAF arises, and how to chain it into reliable code execution.
LATEST
// 06. Blog
Posts & Notes
Case studies, concepts, interview prep, and field notes from a security practitioner.
Learning
Featured
The Bug Bounty Toolkit: A Complete Recon-to-Report Workflow on Linux
Every tool I run on a bug bounty target, in the order I run it - subfinder through to the report - with the exact commands, what each flag does, a single recon script that chains it all together, and the free labs to practise on legally.
Learning
10 min
Building a DevSecOps Pipeline: Lessons from Production
Real-world lessons from embedding SAST and dependency scanning into GitLab CI/CD pipelines at scale - what worked, what didn't, and why.
Learning
13 min
AWS Core Services Explained: What They Do and How They Fit Into a Deployment
EC2, ECS, ECR, ALB, IAM, VPC, CloudWatch - what each AWS service actually does and how they connect together when you deploy a real application.
Concepts
16 min
Top 20 System Design Concepts Every Developer Should Know
From CAP theorem to consistent hashing - the 20 system design concepts that come up repeatedly in interviews and real-world architecture decisions, with practical explanations for each.
Learning
12 min
Linux Commands Every Cyber Security Student Actually Needs
Not a list of 200 commands you'll forget. These are the commands I reach for every single day - for CTFs, pentesting, debugging, and general Linux work - with practical examples for each.
Concepts
10 min
CVEs in Web Security: What They Are and How to Actually Use Them
CVEs show up everywhere in security - job descriptions, advisories, CVSSv3 scores on dashboards. Here's what they actually mean, how the system works, and how to use CVE data in real web security work.
Learning
9 min
Why Every Cyber Security Student Should Be Running Kali Linux
Not because it makes you look cool. Because the tooling, the environment, and the mindset shift that comes with running Kali are genuinely useful - and most students wait way too long to switch.
Interview
9 min
Cracking the Cybersecurity Interview: What They Actually Ask
From behavioural questions to live CTF-style challenges - a breakdown of every stage of the cybersecurity interview process and how to prepare for each round.
Concepts
11 min
Zero Trust Architecture: Beyond the Buzzword
Zero Trust is everywhere in job descriptions. But what does it actually mean to implement it? A technical breakdown of identity-centric security models and what real Zero Trust looks like in practice.
Case Study
10 min
The Living Room Attack Surface
The 2026 LG smart TV investigation read as a practitioner's case study - sensor, firmware and network attack surfaces in one panel, plus the recon lab to test them yourself.
Get new posts in your inbox
No spam. New security write-ups, case studies, and field notes - straight to you.