Academy Basic · 142 articles

Academy Basic

Intermediate Academy modules — Basic tier required (₹499/month)

Academy

Module 3 · S3 Security and Misconfigurations

Amazon S3 is the single cloud service that has caused more publicly-disclosed breaches than any other — by a wide margin. Hundreds…

Apr 19, 2026 · 7 min read
Academy

Module 2 · AWS IAM Deep Dive

AWS IAM is the single largest source of cloud misconfigurations. It’s also AWS’s most powerful feature. Master it and you can architect…

Apr 19, 2026 · 10 min read
Academy

Module 3 · BloodHound for Attack Paths

Individual AD misconfigurations look innocuous on their own. A group with a few extra members. A computer with delegation enabled. A user…

Apr 19, 2026 · 9 min read
Academy

Module 2 · Kerberoasting in Practice

Kerberoasting is the single most common Active Directory attack encountered on pen-test engagements. It’s low-noise, low-skill, highly reliable, and when it succeeds,…

Apr 19, 2026 · 10 min read
Academy

Advanced Routing and VLANs — Static, OSPF, EIGRP, and Where Trust Boundaries Actually Live

Routing is how packets find their way across networks larger than a single broadcast domain. This module is the working introduction to…

Apr 19, 2026 · 11 min read
Academy

Network Protocols Deep Dive — ARP, DHCP, ICMP, DNS, HTTP and the Trust They Assume

Protocols are contracts between machines. Most of the protocols the Internet runs on were designed in the 1980s assuming everyone on the…

Apr 19, 2026 · 10 min read
Academy

Module 4 · Breach Response Tabletop

It’s 2:47 AM on a Tuesday. Your PagerDuty wakes you up. A customer has tweeted a screenshot of what looks like your…

Apr 19, 2026 · 14 min read
Academy

Module 3 · Designing Consent UX

Most DPDP compliance failures don’t happen at the database layer or the security layer — they happen at the pixel layer. A…

Apr 19, 2026 · 11 min read
Academy

Module 2 · Data Mapping Workshop

Every DPDP compliance failure begins with the same sentence: “We didn’t know we had that data.” Data mapping is the discipline of…

Apr 19, 2026 · 11 min read
Academy

Module 6 · IDOR & Authorization Bypass

Horizontal and vertical IDOR, mass assignment, multi-tenant boundary violations, GraphQL authorization. The highest-yield SaaS bug class. Pro module.

Apr 19, 2026 · 13 min read