Latest Posts

• Nemotron 3.5 Bolt vs Qwen3.6-35B: Testing a 2-bit 74B Model as My Vision QA Judge

  NVIDIA released Nemotron 3.5 Bolt on 15 October: a 74-billion-parameter vision model squeezed to 2 bits so it fits in about 24 GB, with benchmark scores that beat Qwen3.6-35B-A3B, the model that does vision work in my lab. The next day I ran them side by side on my two Radeon AI PRO R9700s, using 702 real requests from my own video pipeline rather than a generic benchmark. Qwen kept the job. On the same llama.cpp build it was faster on every speed test, and Bolt broke my pipeline’s answer parsing and could not tell video clips apart. The more useful result was a surprise: the same Qwen model ran my workload 16% faster on a different build of llama.cpp.

• Kicking the Dead 3D Workhorse Back to Life: A Halloween Resurrection of My Ender 3 V2

  For a couple of years my Creality Ender 3 V2 sat in the corner like an old workhorse that had quietly died. It still worked, technically. But printing meant walking an SD card across the room and hoping for the best, so mostly it didn’t print at all.

• Mycelial Nodes: A Matrix-Cut Short Film

  A short interactive film about late nights with a radio dongle, a homelab full of GPUs, a week on red team engagements, a first Tai Chi class and a very fat cat in round galaxy glasses. Everything you see and hear is generated live in your browser: there are no video or audio files, just canvas drawing and a Web Audio trance score that builds the longer you watch.

• Hardware Implants, Part 2: Hiding in Plain Sight

  Its Cybersecruity Awareness Month so lets keep the make you more aware of hacking implant type devices. How many hacking implant type devices can you see in this image?

• Physical Network Implants: The Rogue Device Problem

  Most people picture a cyber attack arriving over the wire - a phishing email, a dodgy link, a brute-forced login. On a physical red team engagement, the attack walks through the front door. Once we’re inside a building, one of the most effective things we can do is quietly plug a small computer into the network and walk back out. That little box is a network implant, and whether an organisation can spot it says a lot about how good their network & physical defences really are.

• A Matrix-Style, AI-Powered Web Analysis Tool

  In today’s digitally-driven world, the ability to quickly understand and analyze web content is invaluable. From security assessments to content summarization, the sheer volume of information on any given webpage can be overwhelming. That’s why I’m excited to introduce a project I’ve been passionately working on: the Web Screenshot Analysis Tool, an application designed to dissect and interpret websites using a suite of cutting-edge AI technologies.

• Top 10 Password Spraying Tools for Red Team Operations

  Top 10 Password Spraying Tools for Red Team Operations

• Top 10 Red Team Tools for Each Engagement Phase

  The top 10 tools in 2024/2025 for Red Teaming divided for each phase of the engagement.

• Red Teaming, Part 2: Initial Access, Phishing and Password Spraying

  Discover the evolving landscape of red teaming in 2024/2025 with a comprehensive review of top offensive security tools. This post examines every phase of a red team engagement—from initial reconnaissance using Nmap, Shodan, Recon-ng, and Maltego to initial access via Metasploit, Evilginx2, Modlishka, and SET. It highlights effective phishing and credential harvesting with tools like Gophish, Phishing Frenzy, and CredSniper, and explores password spraying techniques using Spray365, Trident, and Hydra. In post‑exploitation, advanced command‑and‑control frameworks such as Cobalt Strike, Sliver, Havoc, PowerShell Empire, and PoshC2 enable sustained adversary simulation. Fostering enhanced security posture and robust operational resilience.

• Red Teaming, Part 1: Initial Access and Phishing

  A Consolidated Analysis of Initial Access Techniques, Phishing, and Malicious Document Delivery

• Setting Up a Hacking Server Lab

  This guide entails a general overview of how to setup a hacking lab on a computer/server at home to practice hacking exercises using a software combination of Windows 10 Pro + Virtual Box + Kali Linux + VulnHub Virtual Machine Images.

• GitHub Pages and Jekyll

  This blog post is dedicated to detailing the process of how to create a similar github page like this using jekyll and all other goodies.