Foundations
Reference pages for planning, authorization, scoping, documentation and delivery logic.
research hubselected links
Academy // Offensive research index
Research hubs, field notes and assessment references.
Academy groups the platform into practical research hubs so you can move directly into the surface you are working on, keep related references close and avoid linear training detours.
Research hubs
Each hub opens into standalone reference notes, command-heavy pages and linked public material.
Internal Operations
Infrastructure-led offensive work from enumeration and credential pressure to pivoting and C2.
research hubselected links
Escalation Paths
Host-level privilege paths across Linux, Windows and macOS with emphasis on verification and realism.
research hubselected links
Application Security
Application-security coverage spanning workflow, browser behavior and exploitation logic.
research hubselected links
API Security
Dedicated endpoint, token, object and schema abuse coverage beyond classic browser-led testing.
research hubselected links
Cloud Offensive Security
Provider identities, control planes, IaC drift, Kubernetes and cloud automation abuse.
research hubselected links
Mobile App Pentesting
Android and iOS testing, instrumentation, pinning bypass, storage and mobile reversing.
research hubselected links
Identity / SSO Abuse
Entra, Okta, federation, token theft, consent abuse and tenant trust failures.
research hubselected links
Wireless Operations
Signal capture, protocol analysis, rogue infrastructure and client-side wireless attack paths.
research hubselected links
Adversary Emulation / Tradecraft
Payload staging, OPSEC, AV/EDR pressure, client-side chains and C2 tradecraft.
research hubselected links
DevSecOps / Supply Chain
Git, CI/CD, runner abuse, package trust, signing, SBOM and build-system compromise.
research hubselected links
OT / ICS Security
Modbus, DNP3, PLC and HMI trust, segmentation drift and process manipulation risk.
research hubselected links
AI Security
Prompt injection, agent compromise, retrieval abuse, model APIs and offensive AI ops.
research hubselected links
Drone / Robotics Security
Autopilots, MAVLink, ROS, companion computers and field operator trust.
research hubselected links
Exploit Development
Payload engineering, shellcoding, analysis and exploit-oriented custom tooling.
research hubselected links
Reverse Engineering
Static and dynamic binary analysis across desktop and specialist targets.
research hubselected links
Advanced Pentesting
Specialist assessment routes that connect modern target classes, tradecraft and multi-surface attack paths.
research hubselected links
Secure Coding
Defensive implementation patterns for reducing exploitable design, validation and trust-boundary failures.
research hubselected links
Social Engineering
Authorized human-layer assessments covering pretext controls, communication trust and measurable resilience.
research hubselected links
Source Code Auditing
Manual and automated review of application logic, dependencies, secrets, artifacts and risky data flows.
research hubselected links