A personal blog, mostly notes to future-me
I write up what I learn doing pentesting engagements, homelab experiments, and the occasional CTF writeup.
Walkthroughs of challenges I found interesting or got stuck on.
Techniques and tooling notes from client engagements, sanitized.
Infrastructure experiments, mostly things that broke first.
Scripts and pipelines that save me time later.
How I automated static site deploys with Terraform and GitLab CI.
Chasing a 522 error through three layers of misconfigured Cloudflare tokens.
VLANs, firewall rules, and why I regret not doing this sooner.
Notes from a weekend spent on a crypto-heavy CTF.
How I decide what's worth reporting.
Lessons learned from a targeted-apply mishap.
A short note on API token scoping mistakes.
Why I keep a debug echo line in every new pipeline.
Templating HTML with Jinja2 instead of a full SSG.
Feel free to reach out if you spot a mistake or want to chat.