Network · internals, protocols, ports, DNS, firewalls, home networking
Home & router · the admin page, Wi-Fi, port forwarding, chaining,
fixing it
OS · kernel and processes, Linux internals, Windows internals, endpoint
management, host security
Identity · Active Directory, Kerberos, authentication, social engineering
Application · HTTP, OWASP, prompt injection, headers, secrets
Browser · engines, processes and sandbox, rendering, the
JavaScript runtime and JIT, WebAssembly, origins and isolation
Infra · system administration, virtualization, storage, nginx,
reverse proxies, load balancing, TLS termination, caching & CDN
Data · SQL, NoSQL, vector & graph stores, GraphQL, Kafka, MQTT,
Redis
Cloud · IAM, storage, metadata, containers
Cryptography · from security games to zero knowledge and cryptanalysis
Detection & IR · ATT&CK, the IR lifecycle, IOCs, common detections
Bug Classes · failure mechanisms, Heisenbugs, memory, concurrency, and distributed systems
Vuln Management · CVE/CVSS, KEV, prioritization, scan vs pentest
Threat Modeling · STRIDE, trust boundaries, attack trees, surface
Everything · mixed endless decks across all layers + fill-in-the-blank