Security Notes

{ JSON:SEC }

Calm signal from the edge of security engineering, detection, offensive testing, and hands-on lab work.

2025-09-20

THM Cloud Security Add On 2025

Article

THM have become the definitive training provider for Cyber Security, they have certainly won the popularity contest while also delivering insane amount of content and great value. That is, until you want to do their cloud training on AWS and Azure, where you must pay $329 USD ON TOP OF your annual subscription for this […]

Read article

2025-06-26

Responsible Disclosure: INE Skilldive Solutions Publicly Accessible via IDOR

Article

Overview In March 2025, I discovered that lab solution PDFs on INE’s Skilldive platform (Formally PenTester Academy) could be accessed without authentication, simply by modifying a number in the URL. These appeared to be detailed walkthroughs for INE’s Cyber Security SkillDive labs. I disclosed the issue to INE in good faith. After reviewing, they responded […]

Read article

2024-09-09

Building your Kali-Windows VM Without WSL

Article

Are you a fan of the powerful tools that Kali Linux offers but prefer working in a Windows environment? In this tutorial, I’ll guide you step-by-step on how to create a Windows VM with all the tools you need for ethical hacking and cybersecurity research. By the end, you’ll have your own Windows-based virtual machine, […]

Read article

2024-08-20

In-Depth Review of Sektor 7’s Malware Development Introduction Course

Article

Introduction Are you eager to learn how to write malware? For research purposes, of course! If you’re looking to dive into the world of malware development, Sektor 7’s Malware Development Introduction Course might be just what you need. In this review, we’ll take an in-depth look at what this course offers, including its content, structure, […]

Read article

2024-08-11

CRTO2 Review: A Deep Dive into Red Team Ops Part 2

Article

In the ever-evolving world of cybersecurity, advancing your skills often means investing more time and money into courses that promise high-quality training but come with gruelling conditions—both during the course and the exam. However, there are industry challengers striving to offer excellent education at a more accessible price point, focusing on learning rather than just […]

Read article

2024-08-09

Reviewing the INE Enterprise Defense Admin Course: Is It Worth It?

Article

Introduction When starting a career in cybersecurity, choosing the right certifications can be daunting. With so many options available, it’s easy to feel overwhelmed. Today, I’ll be diving into the INE Enterprise Defense Admin (eEDA) course—a comprehensive program designed for entry-level professionals. We’ll explore the course syllabus, content, pricing, and exam details. If you’re new […]

Read article

2024-08-09

Getting Started in Cybersecurity as a Beginner

Article

Introduction As cyber threats continue to escalate, more people are choosing to dive into the world of cybersecurity. If you’re one of those aspiring professionals, welcome! However, it’s important to recognize that the field is competitive, especially for beginners. But don’t worry—this blog post will guide you through the essential concepts and steps you need […]

Read article

2024-08-09

Long over due start to my blog

Article

After four years of creating content on YouTube, covering everything from hacking tutorials to cybersecurity career advice, I’ve finally taken the plunge into blogging. It’s something I’ve been thinking about for a while, especially as I’ve seen the value in creating a space where I can dive deeper into topics, share resources, and connect with […]

Read article