https://t0ul.com/tags/offensive/Recent content in Offensive on t0ulHugoen-usTue, 06 Oct 2026 00:00:00 +0000https://t0ul.com/blog/the-app-layer-red-team-gored/Tue, 06 Oct 2026 00:00:00 +0000https://t0ul.com/blog/the-app-layer-red-team-gored/<p><em>Part of my <a href="https://t0ul.com/blog/the-plan/">AI Security Engineering</a> series, a local email-to-calendar agent I build, then attack, then harden. If you have not set up the lab yet, start with <a href="https://t0ul.com/blog/setting-up-the-lab/">Set up your lab</a>. The lessons are <a href="https://github.com/t0ul/ai-security-engineering">on GitHub</a>, and the agent itself lives at <a href="https://github.com/t0ul/emaildrop">t0ul/emaildrop</a>.</em></p> <h2 id="the-authors-blind-spots">The author&rsquo;s blind spots</h2> <p>This book has been one person attacking their own work, which is the honest way to learn and the dishonest way to finish. Every attack here was written by the same hand that wrote the defense, so every attack is shaped by the same assumptions, and the vulnerabilities an author cannot imagine are exactly the ones their tests will never contain. A finished system deserves one thing its builder cannot provide: an adversary who does not already know how it is supposed to work.</p>