2025 was a year of growth, exhaustion, and distant horizons. I still love being an engineer, but I've realized it's time to start growing for myself.

Under the premise of legal authorization, phishing simulations are a vital means of assessing an organization's security awareness and defensive capabilities. This article systematically outlines the methodology and practical approach for a standardized, safe, and controlled phishing exercise conducted in 2025, covering information gathering, attack surface analysis, site cloning, platform selection, and data collection.

Using testssl.sh to perform comprehensive compliance and security audits on site SSL/TLS configurations.

A deep dive into a 'wild data center' architecture—built with decommissioned servers, 10G fiber optics, enterprise-grade broadband, and custom tunnels. For the past six months, it has reliably hosted automated backups, off-site NAS synchronization, databases, and code repositories, proving that high availability is achievable on a budget.

Not to escape life, but to rediscover its warmth.

Training is a cornerstone of the cybersecurity industry. Over time, I have developed a wide range of training presentations, stemming from both professional projects and personal interests. Guided by the principle 'Originate from work, excel through sharing,' I believe that knowledge should not be kept in isolation. I am launching this series to publicly share my PPTs, hoping to support your learning journey.

Behind the frequent occurrence of information leaks lies a continuous blurring of privacy boundaries. Developer negligence, institutional apathy, and user compromise weave a 'naked' digital world. Security has long ceased to be a purely technical issue.

A practical quick-start guide to Kscan: installation, essential commands, use cases, and best practices.