Concepts
12 min
Understanding Heap Use-After-Free Vulnerabilities
A deep dive into heap UAF vulnerabilities — how allocators manage memory, how UAF arises, and how to chain it into reliable code execution.
LATEST
// 06. Blog
Posts & Notes
Case studies, concepts, interview prep, and field notes from a security practitioner.
Case Study
Featured
Evil Twin Attacks: A Practical Wireless Security Case Study
Hands-on walkthrough of setting up an Evil Twin attack lab using Raspberry Pi and Kali Linux — WPA2 handshake capture, deauth flooding, and full traffic interception.
Learning
10 min
Building a DevSecOps Pipeline: Lessons from Production
Real-world lessons from embedding SAST and dependency scanning into GitLab CI/CD pipelines at scale — what worked, what didn't, and why.
Learning
13 min
AWS Core Services Explained: What They Do and How They Fit Into a Deployment
EC2, ECS, ECR, ALB, IAM, VPC, CloudWatch — what each AWS service actually does and how they connect together when you deploy a real application.
Concepts
16 min
Top 20 System Design Concepts Every Developer Should Know
From CAP theorem to consistent hashing — the 20 system design concepts that come up repeatedly in interviews and real-world architecture decisions, with practical explanations for each.
Learning
12 min
Linux Commands Every Cyber Security Student Actually Needs
Not a list of 200 commands you'll forget. These are the commands I reach for every single day — for CTFs, pentesting, debugging, and general Linux work — with practical examples for each.
Concepts
10 min
CVEs in Web Security: What They Are and How to Actually Use Them
CVEs show up everywhere in security — job descriptions, advisories, CVSSv3 scores on dashboards. Here's what they actually mean, how the system works, and how to use CVE data in real web security work.
Learning
9 min
Why Every Cyber Security Student Should Be Running Kali Linux
Not because it makes you look cool. Because the tooling, the environment, and the mindset shift that comes with running Kali are genuinely useful — and most students wait way too long to switch.
Interview
9 min
Cracking the Cybersecurity Interview: What They Actually Ask
From behavioural questions to live CTF-style challenges — a breakdown of every stage of the cybersecurity interview process and how to prepare for each round.
Concepts
11 min
Zero Trust Architecture: Beyond the Buzzword
Zero Trust is everywhere in job descriptions. But what does it actually mean to implement it? A technical breakdown of identity-centric security models and what real Zero Trust looks like in practice.
Get new posts in your inbox
No spam. New security write-ups, case studies, and field notes — straight to you.