Field Notes

Offensive security write-ups & research

CVE breakdowns, red team tradecraft, tooling, and lessons from real engagements.

All CVE Research (1) Career & Tradecraft (2) Red Team (3) Web & API Security (3)
Web & API Security
Oct 30, 2026 8 min

OWASP API Top 10 in the Real World: What I Actually Find

A breakdown of which OWASP API Top 10 categories show up most often across dozens of API pentests — and which…
Web & API Security
Oct 12, 2026 7 min

Building a Passive Recon Scanner Without Touching the Target

Notes from building a single-file, dependency-free CMS fingerprinting tool for early-stage recon.

Get offensive security briefings

New write-ups, CVE breakdowns and tooling — straight to your inbox.