I set up REA, an open-source reverse-engineering tool, to drive headless Ghidra 12.1.4 on Debian 13. It took three Java versions, one verified download and a six-line shell function. Along the way it taught me S3 presigned URLs, ELF internals and a few habits I'll keep.
A routine Unsloth Studio update printed a launch command ending in -H 0.0.0.0. One port check later, I found Docker containers, an unauthenticated Ollama API and a year-old SQL Server all open to my network. Here's the audit, every command, and why each fix maps to AWS and Black Hat Python.
OpenClaw turns an AI model into an agent that acts on your machine. Here is why it exists, what it is good for, and the hardening I applied after it updated itself.
A one-line test of my new default browser opened my own blog to an Internal Server Error. What followed was a same-day investigation from the terminal: isolating a PHP failure, verifying a changed SSH host key after a silent cloud migration, working with support, and auditing what was left behind after the fix.
A routine Tumbleweed update turned into three dependency conflicts, a wrong first theory, and a round of whack-a-mole with zypper's numbered solutions. Here's how zypper se -s revealed Packman was ahead of openSUSE, not behind, and how moving six VLC packages in one command cleared the way for a 190-package upgrade. Plus a sidebar on how pasting my own prompt created two mystery files.
Part two of the Proxmox cyber-range series: the first real attack. Connecting to a root
backdoor left listening on Metasploitable, stealing the password file over the target's
own web server, and cracking six of seven hashes in seconds with John the Ripper. A
complete recon-to-credential-access chain, and a hard look at why weak passwords plus
fast hashes equal instant compromise.
Rust switched on its biggest compiler change in a decade, but only on nightly. Here's how I proved my Debian desktop has the new trait solver, using one tiny program, three builds and zero guesswork.
A step-by-step build log for a fully isolated cyber range running three layers deep:
VMware Workstation hosting Proxmox, with Kali and Metasploitable 2 wired onto a private
bridge that never touches the home network. Includes every gotcha I hit — no DHCP, an
IP-range mismatch, and a noVNC console that fought back — plus the nmap scan that proved
it all works.
Building a full-stack task board in Go and Gin, one understood line at a time. This study log covers standing up the server, diagnosing a stubborn port conflict with ss and docker ps, and returning tasks as JSON — with the security defaults the tutorial glosses over.
A complete reference inventory of my Rust development environment on Debian 13, including Rustup toolchains, targets, components, Cargo-installed tools, compiler and linker ecosystem, project inventory, Rust AI/web/GUI experiments, Cargo configuration, and disk usage.