Live tracker for my pass through the PortSwigger Web Security Academy — current status and links to writeups as they land.

Condensed, high-density SQL injection reference — detection, injection contexts, UNION and blind techniques, and per-DBMS syntax (Oracle / MSSQL / PostgreSQL / MySQL) in scannable tables.

Starting the Foundation phase: figuring out what order to attack the PortSwigger web security labs when the platform itself doesn't give you one.

Twelve months of deep work in offensive security — the goals, the timeline, and how to follow along.