Starting this blog

I’m starting this blog for two main reasons.

First, I want to move beyond the usual scope of pentesting and work toward red teaming. I’m interested in understanding the bigger picture: how individual vulnerabilities fit into a broader attack chain, how different techniques work together, and how to approach security from an adversarial perspective rather than just finding and reporting vulnerabilities.

Second, I want to improve my skills in exploit development and vulnerability research. I don’t want to rely solely on existing tools or understand vulnerabilities only at the surface level. I want to dig deeper into how they work, the underlying technologies and architectures involved, and what actually happens under the hood when something breaks.

I’ll use this blog to document what I learn along the way, whether that’s understanding a technical concept, experimenting with something new, working through a challenge, or figuring out why something doesn’t work as expected.

This isn’t meant to be a collection of polished writeups. Those have their own place in the Writeups section. Here, I want to focus more on the process itself: the things I’m exploring, the concepts I’m trying to understand, and the progress I make over time.