Builder and breaker of systems. Privacy and security for the love of the game.

Security work with a focus on network segmentation, VPN and tunnel integrity, and hardening the things most people leave at default. Homelab and personally-owned hardware as the bench. Everything published here is sanitized and built on gear I own.

Focus

• Network segmentation and egress control
• VPN kill-switch and tunnel-integrity testing
• Router and firmware security (OpenWrt-based)
• Hardware and RF attack surfaces: Flipper Zero, Pwnagotchi, and custom RF/BadUSB tooling
• Reproducible, infrastructure-as-code builds
• Remote hardening where physical access and recovery are not options

Work

• pentest-lab — hardened Kali testing environment, built ground-up and documented as a reproducible build
• axt1800-remote-hardening — travel router hardened entirely over a remote management channel, with the constraint and the gaps documented rather than hidden Always learning, potentially breaking.