A cautious operator controls a cheerful square-headed robot with marionette strings.

OSAI: testing AI and learning to work with it

My experience with OffSec AI-300 and the OSAI exam: useful material, challenging but unreliable labs, and what I learned about using AI in my own offensive security workflow.

October 4, 2026 · 6 min

Cybernetics: persistence and purpose-built tooling

A spoiler-free reflection on clearing Cybernetics, a large multi-domain enterprise AD lab. Not the exploit chains, but the two things that actually got me to the end: the persistence to keep returning to the same problem for the better part of a year, and the habit of building and adapting my own operator tooling to fit the lab instead of forcing the lab to fit off-the-shelf tools.

June 14, 2026 · 8 min