xtra

xtra / index

Now

A working record of the subjects I'm spending time on, what that work currently looks like, and where I want to take it next.

01

Active Directory

Building Windows domain labs to understand how identity, policy, and trust fit together.

  • Kerberos and NTLM authentication flows
  • Users, groups, permissions, and Group Policy
  • Event logs and the traces normal domain activity leaves behind

Current direction

Turning the lab into a repeatable environment for testing and documentation.

02

Networking

Following traffic through each layer instead of treating the network as a black box.

  • TCP/IP behavior and packet-level diagnostics
  • DNS resolution, delegation, and mail-security records
  • HTTP, TLS, proxies, and small network programs

Current direction

Building tools that turn raw protocol data into findings that are easier to act on.

03

Web security

Studying where application assumptions break and how those failures can be observed clearly.

  • Authentication, sessions, and authorization boundaries
  • Browser behavior, headers, CSP, and request handling
  • Reproducing issues in small, controlled test applications

Current direction

Writing shorter technical notes that explain both the failure and the defensive view.

04

Python

Using small programs to automate the repetitive parts of investigation and experimentation.

  • Network utilities, parsers, and command-line interfaces
  • Clear output, useful errors, and repeatable workflows
  • Tests for the parts of a tool that make decisions

Current direction

Keeping each tool focused enough to finish, use, and explain properly.