Ramblings of a Professional Hacker
Join me on an engaging journey where I share professional methodologies, practical techniques, and real-world experiences in penetration testing and cyber defense. Whether you're an aspiring ethical hacker or a seasoned cybersecurity professional, you'll discover actionable strategies and innovative tactics to fortify digital security.
What This Notebook Is About
This is where I share what I learn doing offensive security for a living. I'm Drake Axelrod, an Offensive Security Engineer, and these notes are the working reference I wish I had when I was starting out. Methodology, tooling, real techniques, written the way I'd explain them to a colleague.
Latest and Recently Updated
The newest material first, including anything I've recently revisited.
Kerberos delegation attack techniques including unconstrained delegation TGT capture, S4U2Self abuse, and resource-based constrained delegation.
macOS hardening guide covering FileVault, SIP, Gatekeeper, application firewall, Lockdown Mode, and Objective-See tools.
Abusing Windows-signed binaries for proxy execution, file downloads, and defense evasion without dropping custom malware.
Antivirus evasion strategies including shellcode encoding, custom packers, process hollowing, and signature-aware payload generation.
AMSI bypass methods including memory patching, reflection-based disabling, and obfuscation to execute unsigned PowerShell payloads.
OAuth 2.0 attack techniques including redirect_uri bypass, state parameter CSRF, implicit flow token leakage, and authorization code interception.
JWT attack techniques including none algorithm bypass, RS256 to HS256 confusion, weak secret cracking, and kid injection.
XXE injection attack guide for file disclosure, SSRF, and blind out-of-band data exfiltration through XML parsers.
Browse by Category
Pick a domain and dig in. Counts reflect what's currently published.
Web Applications
17SQL injection, XSS, CSRF, auth bypass, business logic flaws, and other web vulnerabilities.
Active Directory
13Kerberoasting, AS-REP roasting, NTLM relay, ACL abuse, ticket attacks, and DNSAdmins exploitation.
Windows
17Windows privilege escalation, group exploitation, service hijacking, and system hardening.
Linux
12Linux privilege escalation, sudo misconfigurations, capabilities, cron and wildcard abuse, hardening.
Network Protocols
9SMB, FTP, SSH, RDP, DNS, SMTP, and WebDAV exploitation and reconnaissance.
Cloud
8AWS and Azure security assessments, IAM privilege escalation, S3 enumeration, and Entra ID attacks.
Containers
4Docker fundamentals, container escape techniques, and runtime hardening.
Mobile
7Android and iOS pentesting, Frida instrumentation, Objection runtime exploration, and SSL pinning bypass.
AI Security
3AI/ML security research, prompt injection, model exploitation, and AI security controls.
Defense Evasion
5EDR bypass, AV evasion, and security monitoring avoidance techniques.
Tools
12Cross-cutting reference for offensive tooling: Nmap, Impacket, BloodHound, Mimikatz, NetExec, and more.
Macos
2What You Can Expect
- Penetration Testing Case Studies, real engagements, anonymized, with the techniques that actually mattered
- Tool Deep Dives, the workflows I use day to day, not the marketing version
- Cyber Defense Strategies, the other side of the same coin, what I'd want my blue team to know
- Reflections from the Field, how the work and the industry are changing, and what I think about it
My Cyber Journey
I started in cybersecurity during my Software Engineering studies, on an internship that threw me into vulnerability research and exploit development. From there I moved into a Junior Penetration Tester role and now work as an Offensive Security Engineer Consultant, leading assessments, mentoring, and continuing to learn at every step.
The Software Engineering background still shapes how I work. I think about control flow and architecture before I think about payloads, and a lot of the bugs I find come from understanding how the system was meant to work and where that intent broke down.
What Drives It
Vulnerability Analysis
I focus on finding the weak points in web apps, APIs, networks, IoT, mobile, and cloud, with a preference for understanding the system before attacking it.
Building My Own Tools
I rely on industry standards like Burp Suite, Metasploit, Nmap, and Wireshark, but I also write a lot of my own tooling in Go, Python, Rust, and Shell. Sometimes the right tool does not exist yet.
Problem Solving
The fun part is breaking down complex systems and finding the seam where the abstraction leaks. That is also where the interesting bugs live.
Disclaimer
Everything here is for educational purposes and is fully NDA compliant. Nothing confidential, proprietary, or sensitive from any engagement appears in these notes. The opinions and techniques are mine, drawn from anonymized or publicly available sources, and should not be taken as legal or professional security advice.
Let's Connect
If any of this resonates, or you want to talk shop, I'm reachable here:
- Email: drakeaxelrod@gmail.com
- Portfolio: drakeaxelrod.dev
- GitHub: github.com/drakeaxelrod
- LinkedIn: linkedin.com/in/drakeaxelrod
Final Thoughts
If this sounds like your kind of thing, check back. I keep adding to this notebook and it grows in the directions my work takes me. I hope it ends up being the resource I would have wanted when I was starting out.
Cheers to a secure and forward-thinking digital future,
Drake