0xnrg

Offensive security practitioner and penetration tester, working as a cyber security consultant by day. Genuinely obsessed with the craft — not a single niche, but the whole surface: Active Directory and Windows internals, web and application exploitation, binary and network attacks, post-exploitation, lateral movement, evasion. If it's a way in, I want to understand it.

The goal is simple and open-ended: to get exceptionally good. That means treating every technique as something to be understood down to the mechanism, not just executed. A method from a writeup is a starting point — the real work is knowing why it works, when it breaks, and how to make it survive contact with a hardened, monitored environment.

Most of my time outside of engagements goes into labs on Hack The Box and OffSec — box after box, chain after chain — because reps are how the theory becomes instinct. I care as much about the tooling as the targets: writing my own scripts forces me to understand what the frameworks are really doing underneath, and keeps me from being stuck when the off-the-shelf option gets flagged or doesn't fit.

This site is my field manual. It documents writeups, full attack chains, and the methodology behind them — organized the way I actually work an engagement rather than as a pile of disconnected notes: information gathering, pre-exploitation, exploitation, post-exploitation, and lateral movement. If a technique made it in here, it's because I've run it end to end and understand why it works.