Resources
Methodologies, report templates, and reference material from my security research and client work.
Methodologies
Web Application Penetration Testing Methodology
Manual, time-boxed methodology for client-facing security assessments. Six-phase approach with structured coverage across the OWASP Top 10, scoped engagements, and CVSS-based severity rating.
Bug Bounty Web Methodology
Depth-focused research methodology for competitive bug bounty targets. Reconnaissance, vulnerability testing across IDORs, SSRF, XSS, SQLi, business logic, and more.
HackTheBox Adversarial Methodology
Adversarial approach to system compromise. Recon, initial access, and privilege escalation across Linux, Windows, and Active Directory environments.