Dissecting House of Apple 2 on modern glibc

An interactive GDB walkthrough of House of Apple 2 on glibc 2.43: FSOP past vtable checks, wide-stream arbitrary call, stack pivot, and ROP—with a follow-along lab.

Tutorial · Security · Linux · Systems Programming · Tutorials

Extending Scapy for Hardware Reverse Engineering

VoidStar Security shows how to use Scapy as a binary protocol framework to dissect SPI/QSPI logic-analyzer captures, trace flash erase/program cycles, and reconstruct firmware without desoldering the chip.

Tutorial · Security · Hardware · Programming · Engineering

How to build a scraping tool

Flavio Copes builds a practical scraper with Node.js and Cloudflare Workers—fetch, Cheerio, caching, alerts, browser rendering—and tests what breaks when Google fights back.

Tutorial · Web Development · Programming · Open Source · Security

Securing web applications with Coraza WAF and Wazuh

How to integrate the open-source Coraza WAF with Wazuh for centralized visibility into SQL injection, XSS, and other OWASP CRS attacks before they reach your app.

Tutorial · Security · Open Source · Web Development

Is my agent secure?

Benoît Devilliers hardens a Hermes assistant for client data: Tailscale-only VPS, least-privilege bot accounts, spending caps, per-user agents, and Infisical Agent Vault so credentials never sit in the model context.

Tutorial · Security · AI Agents · Infrastructure · Engineering

Giving Your Home AI Agent Real Tools: MCP Servers on a Mac mini M6

A walkthrough of the MCP servers James M runs on a Mac mini M6—filesystem, email, calendar, notes, home automation—and the permission choices that keep an always-on home agent from becoming a liability.

Tutorial · AI Agents · AI · Developer Tools · Security

Software sandboxing: The basics

A deep primer on software sandboxing: threat models, OS mechanisms, and practical patterns for isolating untrusted code—foundational reading for secure systems and agent runtimes.

Tutorial · Security · Systems Programming · Programming