- 2026-07-03
Pentesting LLM Applications: A Field Methodology
A repeatable, architecture-led workflow for testing LLM apps and agents — scoping a non-deterministic target, mapping the five attack surfaces, running OWASP LLM Top-10 …
- 2026-06-28
Hunting IDOR / BOLA in the Wild
A repeatable workflow for finding broken object-level authorization in modern APIs — from mapping object references to proving impact.
- 2026-06-20
OSINT: Pivoting From a Single Artifact
How to turn one email, username, or image into a mapped network of entities — a disciplined pivot chain that avoids rabbit holes.
- 2026-06-12
A Recon Workflow That Actually Scales
Turning a wildcard scope into a prioritized attack surface without melting your VPS — passive first, resolve, probe, then triage.