What I Actually Shipped With a Personal Agent Fleet This Week
I ran a personal agent fleet this week instead of treating chat like a search box. Here’s what actually left the machine — and the three failure modes I will not repeat.
Posts
OSWE Exam Review: I Passed - Here's What You Need to Know
I passed the OSWE on 11/23/2025. Here’s my honest take on the exam experience, the prep resources that actually helped, my controversial thoughts on using AI as a study partner, and what’s next on the road to OSCE3.
Bridging Offensive Security and AI/ML: Halfway Through WGU's MSCSAIML Program
Reflecting on reaching the halfway point in WGU’s Master of Science in Computer Science with AI/ML emphasis, and exploring the intersection of offensive security and machine learning.
OSWE Exam Prep: My Journey to OSCE³ Certification #2
My preparation strategy and resources for the OffSec Web Expert (OSWE) exam, the second step toward completing the OSCE³ certification.
HackTheBox - Precious Walkthrough
A complete walkthrough of the HackTheBox Precious machine, covering pdfkit command injection and YAML deserialization privilege escalation.
Deep Dive: Understanding Log4Shell (CVE-2021-44228)
A comprehensive technical analysis of the Log4Shell vulnerability, including exploitation methodology, detection strategies, and mitigation techniques.
Building Custom Wordlists for Targeted Attacks
Learn how to create effective custom wordlists for penetration testing, including OSINT techniques, web scraping, and password mutation strategies.
The Hidden Attack Surface: Security Risks in Model Context Protocol (MCP)
A deep dive into the security implications of MCP (Model Context Protocol), covering tool poisoning attacks, cross-server shadowing, rug pulls, and mitigation strategies for this rapidly adopted AI agent standard.