why
most people's ctf notes are organised by box — kenkaku.md, shibuya.md, etc. that's fine when you're writing them. it's useless when you're six months later trying to remember how you escalated on a similar box. you don't remember the box name. you remember the technique.
thm-notes is organised by attack phase instead. recon, initial access, privilege escalation, persistence, lateral movement. each phase has technique notes (e.g. as-rep roasting, kerberoasting, token impersonation) and each technique links to the boxes where i actually used it. the box writeups are short — they exist to point back at the techniques.
what it looks like
the source is mdx. obsidian is my editor (the graph view is useful here — you can literally see techniques cluster). it publishes as a static site via tearoom. nothing fancy. the value is in the structure, not the platform.