A proof-of-work log for an offensive security practitioner in Adelaide, SA.https://rootfox.dev/https://rootfox.dev/writeups/dvwa-sqli-to-root/https://rootfox.dev/writeups/dvwa-sqli-to-root/DVWA low-security build, chained from a UNION-based SQLi through a cracked credential dump, an unrestricted file upload, and a LinPEAS-guided privesc to root.Wed, 11 Mar 2026 00:00:00 GMTwebdvwalinuxhttps://rootfox.dev/writeups/evil-twin-wifi-capture/https://rootfox.dev/writeups/evil-twin-wifi-capture/Deauth-forced handshake capture and cracking against my own WPA2 AP, then a rogue evil-twin AP to show how readily client devices auto-reconnect to a spoofed SSID.Mon, 02 Feb 2026 00:00:00 GMTwifirfhttps://rootfox.dev/writeups/termux-nmap-recon/https://rootfox.dev/writeups/termux-nmap-recon/A full subnet sweep of my own lab run entirely from a phone, to check what an attacker gets from recon alone if they only had a compromised mobile device on the network.Wed, 14 Jan 2026 00:00:00 GMTlinuxhardware