Security /
Offensive
Scope
- Know what is in, what is out, and what you are actually allowed to touch.
- If the scope is fuzzy, fix that before testing.
Recon / enumeration
- Find the exposed surface first.
- Then figure out what is actually there instead of assuming from a hostname, banner, or scanner result.
- Useful tools: Shodan, GoBuster, ffuf, HackTricks, PayloadsAllTheThings, PEASS.
Validate
- A finding is more useful when it explains what is real, reachable, and why it matters.
- Scanner output by itself is not impact.
Report
- Show the path, evidence, and impact clearly.
- Then give someone enough context to fix it without making them reverse-engineer the finding.