Welcome. I’m vikious, and this is where I write about offensive security: the attack paths, the tooling, and the lessons that usually never make it out of my private notes.
I work across network and physical penetration testing, and physical is where most of my curiosity lives right now. There’s a strange gap online. Plenty of write-ups cover web apps and Active Directory, far fewer walk through the hardware, the badges, and the genuinely physical business of getting inside a building. I’d like to help fill that gap.
What you’ll find here #
- Attack-path write-ups: from first foothold to the objective, explained so you can follow the reasoning and not just copy the commands.
- Hardware and physical security: RFID, badge cloning, the tools and the tradecraft behind physical assessments.
- Methodology notes: the repeatable checklists I actually use.
Why write it down #
Two reasons. Writing forces clarity: if I can’t explain an attack path cleanly, I don’t understand it as well as I think I do. And sharing in the open is how this field gets better. I’ve learned an enormous amount from people who took the time to document their work, so consider this me starting to pay that back.
If any of it is useful to you, that’s the whole point. I’m always happy to swap notes, compare approaches, or just talk shop with others working in the same space, so feel free to reach out any time. The About page has my email.
Let’s get into it. 🐚