🧨 RedTeamFromScratch

Welcome to my red team ramp-up — part study guide, part simulation, part personal lab notebook.

I'm a Navy veteran pivoting into offensive security with zero formal tech background, just grit, caffeine, and curiosity. This repo tracks my hands-on learning across core red teaming concepts using free tools, public labs, and real-world exploit writeups.

🔍 What's in this repo?

Each day focuses on a specific vulnerability, tool, or adversarial technique. For each one, I break down:

• 📓 Technical notes and concepts
• 🧪 Labs and walk-throughs
• 💣 Payloads and testing strategies
• 🛡️ Mitigations and defense notes
• 📚 Real-world examples and CVEs
• 🔁 Reflections on what tripped me up or clicked

✅ Sample Topics:

• SSRF
• XSS
• LFI/RFI
• SQLi
• IDOR
• Authentication bypasses
• Enumeration tooling (FFUF, Nmap, Gobuster, etc.)

🗂️ Repo Structure

RedTeamFromScratch/
├── Day01_SSRF/
│   ├── room_notes.md  # Concepts, tools, and example payloads
│   ├── real_world_scenario.md  # Breach summaries or public CVEs
│   ├── mitigations.md  # How defenders detect and block it
│   └── reflection.md  # What I learned, struggled with, or want to revisit
└── Resources  # Tools, cheatsheets, and general references

⚙️ My Setup

• Kali Linux (VM)
• Burp Suite Community
• Obsidian for daily logs + longform notes
• GitHub for version control + portfolio building

💡 Why I’m Doing This

I got tired of waiting for the “right” way to break into cyber. So I started building my own.

This is part bootcamp, part accountability, part message in a bottle to other late bloomers, career switchers, and curious weirdos learning in public.

---

Disclaimer: This repo contains only legally accessible research, public lab work, and self-hosted testing environments. No unauthorized access or live target exploitation is performed.