Notes from the work.

Reconnaissance technique, detection engineering and the parts of attack surface management that do not fit in a README.

Computer components: what the CPU, RAM, motherboard, GPU and storage do, and what MHz and GHz mean

The five internal parts of a computer, what Hz, MHz and GHz count, and how to read your own CPU, memory, graphics and storage on Linux and Windows.

16 Oct 20268 min read

Reconnaissance

Finding what exists before deciding what to test, and knowing which of it is real.

1 Sept 2026
Passive vs active subdomain enumeration, and when each one lies
subfinder returns over six hundred names for tesla.com; well under half resolve. Passive and active subdomain enumeration fail in opposite directions.
Subdomain enumerationDNS

Networking

How the wire, the frame and the packet actually behave, and why every tool you run depends on it.

Opsec

What a device or an operator reveals just by being observed, and how to keep it from adding up to something identifying.

8 Sept 2026
From plaintext DNS to DNS over TLS: watching a query disappear inside TLS
One DNS query captured twice, plain and over DNS over TLS: example.com legible in Wireshark's hex dump, then ciphertext, and what an observer still reads.
DNSDNS over TLS