CHW Cybersecurity Blog and Portfolio
Welcome to CHW World
█
A party engineer named CHW (ID: chw41) specializing in
Web Security, Penetration Testing, and
Red Teaming.
Currently an active member of the CTF teams 竹狐 (TakeKitsune) and i'm downQQ , and a second-cohort Master’s graduate of is1ab (Information Security Laboratory).
Holds OSWA, OSCP+ certifications.
Work Experience
[OSWE, WEB-300] Instructional notes - Part 1
OSWA WEB-300 筆記 Part 1，涵蓋 Managed .NET Code, Decompiling Java Classes 教學、ManageEngine AMUserResourceSyncServlet servlet SQLi 攻擊。
[AI] Penetration Testing Notes: Recon, Web, Privilege Escalation, AD, and Pivoting
Penetration testing notes by CHW covering reconnaissance, enumeration, web exploitation, privilege escalation, Active Directory, tunneling, and practical labs.
[AI] Red Team Notes: OPSEC, Lateral Movement, AD Persistence, and Operator Workflow
Red team notes by CHW covering OPSEC, lateral movement, Active Directory persistence, credential attacks, pivoting, and operator-focused offensive workflows.
[AI] Web Security Notes: Web Recon, XSS, SSTI, SSRF, IDOR, and Exploitation Cases
Web security notes by CHW covering web reconnaissance, XSS, SSTI, SSRF, IDOR, exploitation workflows, and practical offensive security labs.
[OSWA, WEB-200] Instructional notes - Part 2
OSWA WEB-200 筆記 Part 2，聚焦 SSTI、command injection、SSRF、IDOR 與常見 Web 漏洞重點。