rh33t

I write about security, low-level systems, and things I find interesting.

Research

Deploying the ELK Stack

Mar 2024

Setting up an ELK stack with Vagrant to centralize logs from Snort, Suricata, and a Windows machine: installation, Logstash pipelines, and Kibana dashboards.

CTF

Reversing NyanKonton

Apr 2026

Static reverse engineering of a Mach-O ARM64 CTF binary on Linux: custom hash bruteforce in Rust with rayon, flag decryption in Python, no execution needed.

A First Return-Oriented Exploit

Mar 2026

Solving the ret2win32 challenge from ROP Emporium in x86: analysis with pwndbg and checksec, offset calculation with cyclic, pure Python exploit and pwntools version.

Misc

My VPN wasn't enough.

May 2026

The Security Workstation

Oct 2025

Projects

tripleawire

Real-time network traffic capture and alert engine: Go core, React UI.

Go

dns-tunneling

File exfiltration over DNS: encode, chunk and reconstruct via DNS queries.

Python

secmachine-build

Ansible playbook to automate a full pentest environment setup on Kali/Parrot.

Ansible

shelf

CLI workspace manager for CTF and pentest environments.

Go

cybertools

Curated resources for red teaming, Active Directory, reverse engineering and exploit development.

JavaScript

opencode-vm

Isolated Ubuntu VM setup for running OpenCode AI agents safely: Vagrant + bind-mounted workspace.

Shell