Knowledge tree
Offensive Security
Shells
File Transfer
Web Applications
KNOWLEDGE BASE
Notes
Notes I come back to for day-to-day pentesting, systems work, and the things I'm learning about AI security and agentic systems.
Recently updated
19 notes- AI / SecurityAgent PermissionsHow an agent's requested actions become real effects, under which identity, and with what authority.
- AI / SecuritySandboxing & EgressHow to limit what an agent execution can reach, and why outbound network control is part of the same security boundary.
- AI / SecurityPrompt InjectionHow untrusted input can alter a model's decision, and why impact depends on the capability that decision can reach.
- AI / AgentsAgent LoopThe cycle in which an agent observes a result, chooses the next step, acts, and repeats until it can stop.
- AI / Applied AIModel APIsThe basic shape of calling a model from code and handling output, usage, streaming, tools, and state.
- AI / AgentsAgent HarnessThe program around a model that supplies instructions, tools, a runtime, and checks so it can work on an environment.
- AI / Applied AIAPI PricingHow to calculate input, output, and cached-input cost when a session or agent task makes several calls.
- AI / Applied AIDeployment ModelsWhere the model runs in each option and which parts of the application, runtime, and hardware you manage.
- AI / FundamentalsTokens & ContextHow input becomes tokens, what occupies a context window, and what happens as a session grows.
- AI / AgentsTool UseHow a model requests a tool, who performs the operation, and what result returns to the next step.
- AI / FundamentalsInferenceHow a model processes input and generates output through prefill, decode, sampling, and streaming.
- AI / Applied AILocal InferenceHow to fit and tune a model on local hardware through quantization, memory, GPU offload, context, and runtime choices.
- AI / AgentsSubagentsHow an agent delegates a bounded task to another agent, and when parallel work repays its coordination cost.
- AI / FundamentalsReasoningWhat changes when a model is given more reasoning effort, and when the extra time and usage are worthwhile.
- AI / FundamentalsContext EngineeringHow to decide what the model needs now and what should remain outside context for later retrieval.
- Offensive Security / Web ApplicationsPHP Web TestingPHP-specific request parsing, loose comparison, dynamic evaluation, and stream-wrapper behaviors useful during web application testing.
- Offensive Security / ShellsRemote AccessOperational reference for turning reachable protocols and authentication material into remote sessions or execution.
- Offensive Security / File TransferWindows File TransfersPractical Windows file-transfer methods for shells, remote sessions, constrained networks, and common pentest fallback paths.
- Offensive Security / File TransferLinux File TransfersPractical Linux file-transfer methods for shells, SSH sessions, constrained hosts, and common pentest fallback paths.