Knowledge Base
Browse foundational cybersecurity domains. Tap a topic and ask the chat for a deep dive.
Networking & Protocols
· OSI Model
· TCP/IP Stack
· DNS internals
· HTTP/HTTPS & TLS 1.3
· VPN (IPSec, WireGuard)
Application Security
· OWASP Top 10 (2021)
· OWASP API Top 10
· Secure SDLC
· Input validation & output encoding
· CSRF / XSS / SSRF defenses
Cryptography
· Symmetric vs Asymmetric
· Hashing (Argon2, bcrypt)
· Digital signatures
· PKI & X.509
· Common crypto pitfalls
Cloud & IAM
· AWS/Azure/GCP shared responsibility
· Zero Trust architecture
· IAM least privilege
· Secrets management
· Container & K8s security
Detection & Response
· MITRE ATT&CK
· Sigma rules
· SIEM fundamentals
· Threat hunting
· NIST SP 800-61 IR
Compliance Frameworks
· NIST CSF 2.0
· ISO 27001 / 27002
· SOC 2 TSC
· PCI-DSS v4
· GDPR / HIPAA
Offensive (Authorized)
· PTES methodology
· OWASP WSTG
· Active Directory attack paths
· Recon → Exploitation → Reporting
· Always pair with blue-team view
Forensics & Malware
· Volatility / Memory forensics
· Disk imaging (dd, FTK)
· PCAP analysis (Wireshark, Zeek)
· Static & dynamic malware analysis
· Chain of custody
External references
OWASP Top 10
MITRE ATT&CK
NIST CSF
CIS Benchmarks
PortSwigger Web Academy