0xSebin - Sebin Thomas

Building a Personal Cybersecurity RAG: From a Skills Repository to a Searchable Red-Team Knowledge Base

Building a Personal Cybersecurity RAG: From a Skills Repository to a Searchable Red-Team Knowledge Base

Building a Personal Cybersecurity RAG: From a Skills Repository to a Searchable Red-Team Knowledge BaseA technical build log covering the architecture, infrastructure, corpus preparation, ingestion, r

2026-11-08

AI Security

#Hack The Box #RAG #AI Security #LLM Security #MCP #Ollama #Qdrant #Hermes Agent

Range: Willmore Group [Insane]

Range: Willmore Group [Insane]

Willmore Group is an Insane-difficulty, multi-host Active Directory range from Hack Smarter. It spans two forests – willmore.local and wmcapital.local – across three network segments, starting from a

2026-09-08

Hack Smarter

#Active Directory #ADCS #Privilege Escalation #Prompt Injection #Hack Smarter #Kerberos #BloodHound #Pentest #SCCM #MSSQL #NAS #NTLM Reflection #CVE-2025-33073 #NTLM Relay #ESC8 #Golden Certificate #SQL Injection

HackSmarter | Mapper (Medium)

HackSmarter | Mapper (Medium)

Platform: HackSmarterLab: MapperDifficulty: MediumCategory: AWS Cloud Security ObjectiveYou have been hired to perform an AWS pentest against a client’s account. They have requested you perform a fu

2026-08-29

Hack Smarter

#Security #AWS #Cloud Security #IAM #Privilege Escalation #Lambda #Secrets Manager #CTF

Westbridge University - Hack Smarter Range [Hard]

Westbridge University - Hack Smarter Range [Hard]

Westbridge University is a multi-host Active Directory range on Hack Smarter built around a two-domain forest. The environment is designed to simulate a realistic enterprise network and provides a cha

2026-08-26

Hack Smarter

#Active Directory #Red Team #Silver Ticket #ADCS #Hack Smarter #Kerberos #BloodHound #Constrained Delegation #RBCD #Pentest

LLM02: Sensitive Information Disclosure

LLM02: Sensitive Information Disclosure

This is my running logbook for LLM02: Sensitive Information Disclosure - #2 in the OWASP Top 10 for LLM Applications (2026). Same format as the Prompt Injection log: a new hands-on writeup here each t

2026-08-22

AI Security

#Security #AI Security #LLM Security #MCP #CTF #OWASP #Sensitive Information Disclosure

LLM10: Improper Output Handling

LLM10: Improper Output Handling

This is my running logbook for LLM10: Improper Output Handling - #10 in the OWASP Top 10 for LLM Applications (2026), and the most “classic AppSec” of the lot. Same format as the Prompt Injection log.

2026-08-22

AI Security

#Security #AI Security #LLM Security #CTF #OWASP #PortSwigger #Improper Output Handling

PortSwigger Web LLM Attacks: Lab Index & Writeups

PortSwigger Web LLM Attacks: Lab Index & Writeups

PortSwigger’s Web Security Academy has a small, sharp topic called Web LLM attacks - four labs on attacking LLM-backed web apps: mapping what a model can reach, abusing its tools, and treating its out

2026-08-21

AI Security

#Security #AI Security #LLM Security #PortSwigger #Web Security

LLM03: Excessive Agency

LLM03: Excessive Agency

This is my running logbook for LLM03: Excessive Agency - #3 in the OWASP Top 10 for LLM Applications (2026), and the biggest climber on the 2026 list. Same format as the Prompt Injection log: a new ha

2026-08-21

AI Security

#Security #AI Security #LLM Security #CTF #OWASP #PortSwigger #Excessive Agency