المدونة
مواضيع أتعلمها وأجربها: أمن السحابة والثقة الصفرية واختبار الاختراق والمختبر المنزلي. المقالات باللغة الإنجليزية.
10 مقالات
ابدأ هنا
My home lab: an HP Z440 with a few different jobs
Proxmox, local AI, and Plex on one HP Z440, plus the network around them. What I run and what I want to learn next.
- INCIDENT RESPONSEMALWARE
Persistence: what I'd look for after an attacker gets in
A suspicious startup entry is only a lead. The work is finding out who created it, what it runs, and whether it comes back after cleanup.
4 أغسطس 20263 دقائق قراءة - AI SECURITYARCHITECTURE
AI agents and OpenClaw: what the agent is allowed to do
An agent with tools can change real systems. I care more about the authority we give it than about a prompt telling it to behave.
10 مايو 20254 دقائق قراءة - PENTESTINGIOT
CAN bus security: learning the messages before the attacks
CAN is a good place to study what makes a message trusted. I'd start in a small virtual lab, with no real vehicle involved.
12 أبريل 20253 دقائق قراءة - NETWORKINGARCHITECTURE
Zero trust and SASE: what I'd check before switching
A different access product won't fix an unclear policy. I'd start with the applications, identities, and failure paths.
18 مارس 20253 دقائق قراءة - CLOUDGCP
GCP security: follow the identity and the reachable path
A long list of findings doesn't tell me what to fix first. I want to understand how exposure, identity, and permissions fit together.
11 مارس 20253 دقائق قراءة - CTFREVERSE ENGINEERING
CTF notes: the solve is only part of it
As I build pentesting skills, I want my practice notes to explain the reasoning, the dead ends, and what would matter outside the challenge.
2 ديسمبر 20243 دقائق قراءة - ARCHITECTUREIOT
Zero trust in industrial IoT: start with the access
A controller can't always run an agent or support modern authentication. That changes where you enforce access, and what you need to test.
24 أكتوبر 20243 دقائق قراءة - AUTOMATIONINCIDENT RESPONSE
Security automation: start with the repetitive part
I'd automate the prep work before I automate any response. A small script should save time without making a security decision harder to review.
4 يونيو 20243 دقائق قراءة - IAMAUTHENTICATION
Hardware security keys: plan the recovery too
I like phishing-resistant authentication. I also want to know what happens when someone loses the key or changes devices.
4 مارس 2024دقيقتا قراءة