Today I began turning a second physical Debian laptop into a real endpoint for my Microsoft security lab. I installed Microsoft Defender for Endpoint, verified its health, and discovered an important distinction between installing an agent and actually onboarding it into an enterprise security organization.
A video about the ArrayRef supply-chain attack made me question the Rust crates I had recently installed on Debian.
The real payoff came last: the official HTTP API silently hung with no error, so reading the node's own source code on GitHub uncovered its raw socket protocol instead — and a hand-built Python client, no SDK, no libraries beyond socket and json, ended up pulling live chain data straight off the wire.
Setting up a real Security Information and Event Management (SIEM) system in a home lab has been on my list for a while. I wanted something powerful enough to teach me real cybersecurity skills, but free and self-hosted. After comparing…
I set up a DShield honeypot on an Ubuntu 26.04 LTS virtual machine running under VMware. After confirming the OS version, I created a dedicated dshield user, installed the necessary packages, and cloned the official DShield-ISC repository. I worked through…
Detailed Summary Today I took a deep, hands-on dive into x86-64 Linux system calls by writing and debugging a pure assembly “Hello, Assembly!” program with no C library. I started with a simple NASM program that uses the modern syscall…
I installed angr, a powerful open-source Python framework for binary analysis and symbolic execution. It lets me automatically explore different execution paths in a program without needing real inputs for every case. How I Installed It I created a virtual…
Why install them Tool Primary Reason for Installing Main Usefulness Compiler Explorer Instantly see how high-level code (C) turns into assembly across many compilers and architectures Teaching, learning, quick experimentation, comparing compiler output, understanding optimization Binary Ninja Free Interactive reverse…
I installed Ghidra 12.1.2, the free and open-source reverse engineering framework originally developed by the NSA. It is one of the most capable free tools available for analyzing compiled binaries. How I Installed It on Debian I downloaded the official…
I recently installed GDB 16.3, the GNU Debugger, on my Debian system. It is an incredibly powerful and free tool for dynamic analysis and debugging. How I Installed It I ran these commands: Bash I also installed GEF (a modern…