offensive security notebook
I’m nullm, an offensive security practitioner. This is where Hack The Box fieldwork, experiments, and the occasional useful rabbit hole become notes worth keeping.
Latest note 01 / 03
Practical notes from labs, products, and rabbit holes. No publishing treadmill—just writeups when there is something useful to preserve.
Abusing an authorized code-execution feature to obtain a shell from a Cribl Edge node—and the setup decisions that keep the test controlled.
Read the writeup →Current signals 02 / 03
A small, living index of where I practice, what I publish, and what keeps pulling me back in.
Level 88 / Prodigy. 61 machines completed and a 101-week personal-best streak—one lab at a time.
Code, proof-of-concepts, and notes that escaped the local folder.
Intentionally low volume. New work lands here instead of being padded into a content schedule.
A little context 03 / 03
An offensive security practitioner who spends a lot of free time on Hack The Box and occasionally turns the useful parts into public notes.
Application behavior, strange trust boundaries, practical exploitation, and learning by gently pulling systems apart.
Direct, reproducible, and informal. Enough context to follow the path—without content for content’s sake.
