Field Notes
Offensive security write-ups & research
CVE breakdowns, red team tradecraft, tooling, and lessons from real engagements.
Red Team
Havoc C2 in Practice: Lessons From 200+ Engagements
What actually matters when you're running Havoc C2 against a live target — from OPSEC to persistence to knowi…
Red Team
Active Directory Attack Paths I See Most Often
A field-tested rundown of the AD misconfigurations that reliably lead to domain compromise.
Get offensive security briefings
New write-ups, CVE breakdowns and tooling — straight to your inbox.