Tycoon 2FA is an Adversary-in-the-Middle (AiTM) phishing kit sold as phishing-as-a-service (PhaaS). It targets Microsoft 365 and Gmail by proxying legitimate login flows to intercept credentials an...

Pursuing my master’s degree sharpened more than my writing ability. It trained me to communicate complex ideas with clarity. I learned how to structure papers to persuade informed audiences and how...

I built an OpenSSH honeypot on Unraid to observe and control real-world attacker behavior hitting exposed services. The goal was not just to block access, but to study how automated and manual intr...

I completed the Red Team Operator course on May 13, 2024. The course focused on the Marine Corps approach to red teaming and offensive operations, emphasizing disciplined tradecraft and operational...

Cyber Nerd Discord Bot The Cyber Nerd Discord Bot is an interactive cybersecurity learning bot designed to continuously challenge and educate users through daily questions, live updates, and autom...

GCIH was a beast for me. Going into this exam, I was extremely stressed. Everyone I talked to said SANS certifications were the hardest out there and that they would test the full depth of your kno...

I completed SecurityX on February 23, 2024, and this exam was huge for me. This was the first certification where I put the full weight of everything I knew into preparation. Focus on the Exam...

Running Unraid forced me to understand storage at a practical level instead of an abstract one. I learned the difference between harddrives built for capacity versus speed and why that distinction ...

I completed the SSCP exam on January 10, 2024 as a deliberate step toward preparing for CISSP. The goal was not to learn new material, but to understand how ISC2 structures and frames its exams. S...

I completed AZ-900 on August 18, 2023 to get familiar with cloud concepts, not to specialize in Azure. The core takeaway was simple: cloud infrastructure is fundamentally the same as on-premise in...

I completed the CompTIA PenTest+ exam on June 16, 2023, roughly two weeks after finishing CySA+. For this certification, I relied on a combination of studying directly from the official exam object...

When I started preparing for CompTIA CySA+, I quickly realized it was very similar to Security+, but with a stronger emphasis on analytical and operational aspects. The foundational concepts were f...

Two months after earning Security+, I took the CompTIA Server+ exam and passed on May 5, 2023. My original plan was to pursue Linux+, but it was not supported by the program I was enrolled in at th...

I took the CompTIA Security+ exam two weeks after completing Network+ and passed on March 5, 2023. Unlike Network+, this certification required a mindset shift rather than a continuation of pure ne...

I prepared for the CompTIA Network+ by combining exam prep with a strong technical foundation I had just finished building. I completed the Jason Dion Udemy Network+ course and took every pretest h...

I designed and configured my own home firewall to better understand how real networks operate, segment, and protect assets. I wanted to see how decisions made at the network layer directly affect s...

Between the end of March and July 2022, I spent nearly all of my free time on TryHackMe. I woke up every day itching for knowledge and the next thing I could gain from the labs. I would learn all t...

I completed JCAC (Joint Cyber Analysis Course), a six-month NSA-hosted military schoolhouse focused on building a deep technical foundation in cybersecurity. This was not something you study for. I...