Field kit
Operator tools beyond the directory
Decision coaching, recipes, field mode, offline notes, mappings, reporting practice, comparisons, wordlists, roadmaps, glossary, and curated writeups — wired into the same curriculum.
Authorized testing only. Practice on systems you own, isolated labs, or targets with written permission. Unauthorized access is illegal.
Engagement case file
Scope, assets, pinned plan, findings, and detection notes in one local report.
Engagement plans
Kill-chain paths that mix phases, tools, recipes, and ATT&CK — pin them to the case.
Operator bench
CVSS 3.1, subnet math, hash identification, encoding, JWT structure, and a port crib.
ATT&CK board
Tactic columns for taught techniques. Log a detection straight onto the case file.
Detection log
Purple worksheet: technique, data source, hypothesis, and an honest result.
Command builder
Pick target type and phase → safe example commands with placeholders, copy, and RoE warnings.
Mobile field mode
Compact cheatsheets for next to a keyboard — large type, sticky sheet switcher, minimal chrome.
Offline lab notes
Device-local notes with Markdown export. PWA-friendly for offline reading between lab steps.
ATT&CK / OWASP map
Filter techniques and categories, jump to related tools and modules for purple thinking.
Finding writer
Structured form → client-ready Markdown export for real deliverable practice.
Compare tools
ffuf vs gobuster vs ferox, Burp vs ZAP, hashcat vs john — when each wins.
Wordlists & payloads
SecLists-style paths by use case with “use with X tool” recipes.
Cert & career roadmaps
eJPT → PNPT → OSCP-style paths mapped to OpsField modules and weekly hours.
Glossary
LLMNR, RTSP, VLAN, AS-REP, SSRF… clear definitions with see-also tools and modules.
Writeup gallery
Curated external links — methodology, walkthroughs, labs. Not a CMS.
Cheatsheets
Copy-ready one-pagers for LAN audits, Nmap, web mapping, AD, and reporting.
Scenario playbooks
End-to-end narratives from IoT cameras to purple detection loops.