Public lab notebook,
mapped as a learning path.

Token tampering, none-alg abuse, weak secrets, key header injection, JWKS, JKU, KID, and algorithm confusion.

Union-based SQLi, blind SQLi, conditional responses, conditional errors, time delays, Oracle and non-Oracle enumeration.

Challenge discovery, XSS, login bypasses, request manipulation, and Burp-driven testing against a modern vulnerable app.

Enumeration, SUID, sudo rights, PATH hijacking, cron jobs, capabilities, kernel exploits, and post-exploitation workflow.

Proxy, Repeater, Intruder, Decoder, Comparer, and a practical manual testing workflow for web assessments.

NAS experimentation, local website exposure, tunneling, SMB, device access, and practical infrastructure troubleshooting.

Access control, SSRF, OAuth, web cache deception, WebSockets, and authentication flaws. These should become future write-up clusters.

Linux/Windows enumeration, privilege escalation, tunneling, Active Directory basics, exploit adaptation, and report writing.