Thoughts on offensive security, cloud architecture, tooling, and the Australian cybersecurity landscape.
A practical walkthrough of the most frequently abused IAM misconfigurations I encounter during AWS penetration tests, with detection and remediation guidance for each.
Reflections on how red team operations have evolved over the past decade — from simple phishing campaigns to sophisticated, multi-month simulated nation-state intrusions.
A practical guide to setting up a cost-effective home lab for practising penetration testing techniques — from network segmentation to intentionally vulnerable targets.