In June 2025 I wrote a post about running a CTF inside Discord. The description said, and I quote myself, "No CTFd, no web frontend, no spreadsheet." I was proud of that line.

Seventeen months later, there's a web frontend. lol.

That's YouArePlayer. The judge bot is still in there, it just stopped being the whole thing.

CTF, a blockchain challenge, clock running. The flag was somewhere down a chain of transactions and I was trying to follow the money by hand — one Etherscan tab, copy the "to" address, paste it into a new tab, scroll, copy the next hop, paste, scroll. Twenty tabs deep I'd lost the thread completely: which branch was I on, had I already seen 0x9f…c2, and was this even the real money or a dust attack dragging me sideways. My teammates were solving things. I was untangling Christmas lights in the dark. We didn't get that flag.

So afterward I built chainmap. Paste an address, it draws the graph — address to address, expanded outward as far as you want. The twenty-tab crawl becomes one picture you can actually read.

I've been dropping rclone into every new project since January. Once you watch encrypted dumps land in R2 in the time it takes to refill a coffee, every managed-backup-as-a-Service feels like paying rent on somebody else's wizard.

Latest one is youareplayer.com — small Postgres, single VPS, the kind of side project where one bad migration erases a weekend and the only insurance is the dump you forgot to run. Managed backups at $5–$20/month? Fine for a company, painful for a project paying its own server bill.

So: free, encrypted, off-site. $0/month if the database stays inside the R2 free tier. Here's the setup that's been running daily since.

A real malware analysis job. The trail went sample → strings → network IOCs → C2 infrastructure → on-chain. The funds went through a mixer.

Halfway through that chain I realized I had solid SOPs for the first half and absolutely nothing written down for the back half. Blockchain address clustering, mixer heuristics, bridge read-flow, how to structure on-chain evidence for court admissibility — I was building all of it on the fly. I finished the job, wrote down what I'd worked out, and that became the seed for what's now in v2.0.

Intel Codex v2.0 ships 11 new SOPs. Most of them exist because a real investigation or assessment hit the edge of what v1.0 covered.

CTF weekend. My teammate can't run my exploit because their Ubuntu isn't my Ubuntu. Different Python version, different libc, different vibes. The tool that works on my machine installs cleanly on mine and fails silently on theirs. We burn 40 minutes on environment debugging instead of the actual challenge.

The "works on my machine" problem, but for offsec tooling. The fix is obvious in hindsight: package everything into one image so the next teammate just does docker pull.

pwndocker-reverse is that image — 45+ tools on Ubuntu 24.04, everything from pwntools to Ghidra to AFL++ to three GDB plugins that coexist without breaking each other. One pull, you're in.

Forensics challenge, 90-minute timer. I spent 60 of those minutes running vol -f memory.raw <plugin> in sequence, one plugin at a time, piping output to files, checking for errors, moving to the next. Mechanical, repetitive work. And at the end of it I had 25 output files to correlate — and I'd never gotten to malfind. The artifact was in there. I missed it because I ran out of time doing the wrong kind of thinking.

That's the problem: Volatility 3 is powerful, but the interface is 20+ manual commands on every single case. Volatility Toolkit automates the sequence. Auto-detect the OS, run all relevant plugins in parallel, extract IOCs, structured report. One command. Then you think about what the dump shows, not which command to type next.

I forgot my anniversary twice in the same year. I committed AWS keys with GPS metadata still in the EXIF. I did Red Team work on Starbucks WiFi. I sent a 2am email to a CEO about "agile bullshit".

These are not hypothetical failure modes. These are the origin stories.

zero-trust-lifestyle is what happens when a security researcher gets tired of being the threat model. 33 bash scripts, each one born from a real incident, covering everything from OPSEC paranoia to relationship maintenance to corporate survival. Someone found the scripts folder:

"So I'm going through my colleague's scripts folder. This security researcher has automated their entire life. You're not gonna believe this shit."

Accurate.

My first TraceLabs CTF. The clock is running, my teammates are already triaging leads, and I'm still typing site:linkedin.com "John Doe" Seattle by hand. The same query I've typed a hundred times. Then the username variants. Then the reverse image search URLs for each platform, one by one. We finished 7th, which is fine, but it didn't feel like 7th-place work — it felt like I'd spent a third of the competition on mechanical tasks that shouldn't take that long.

I went home and started building dorkhound. Give it a name — or a full case file with emails, phones, usernames, a photo — and it generates 340+ ranked search URLs across 25 categories, ready to triage. The scaffolding that used to take 45 minutes takes about three seconds.

Mid-CTF, web challenge, something is hidden on the page. I'm digging through source by hand, looking for HTML comments and concealed tags, squinting at DevTools like a man who lost his glasses. Ten minutes of this. Worst ten minutes of my life.

That became the first bookmarklet — Expose Hidden Content. One click, color-coded highlights, done in two seconds. The rest accreted from the same place: every "ugh, this again" moment during a CTF or OSINT investigation that was repeatable enough to automate. Username generation from a name. Bulk URL opening from a dork result. Domain reconnaissance without opening 30 tabs manually. Each one is a muscle memory shortcut that stopped being manual.

That's bookmarklets — 9 tools built on one principle: drag a link to your bookmark bar, click it on any page, done. No install, no extension permissions, no trust in a third party. The entire source is visible JavaScript that runs locally in your browser. Nothing leaves the page.

You ask an AI agent to fix a bug. It fixes the bug, refactors three unrelated functions, renames some variables "for clarity", and force-pushes to main. You ask it to deploy. It does — to production, without asking, because you didn't say not to.

AI agents have a discipline problem. They're powerful, and that power without guardrails is genuinely dangerous. Not in the science fiction sense — in the "I now have to spend two hours reverting a cascade of well-intentioned changes I never requested" sense.

The root cause is that every agent operates in a vacuum. No shared rules, no accountability, no memory of corrections. It's like hiring contractors and giving none of them an employee handbook, then being surprised when they all work differently.

Contract Agents v3.0 is the handbook. 52 specialized agents across 8 divisions, all governed by one shared contract. The agents don't decide how to behave — the contract does.

OSINT CTFs are a team sport, and the bottleneck is almost never knowledge — it's coordination. During a competition, our team was hitting maritime challenges, aviation challenges, username enumeration, the full spread. And a significant chunk of time just evaporated into "which tool do I use for this?" and "is that source reliable enough to submit on?"

The experienced members had their go-to sources. The newer ones didn't, and asking mid-CTF burns time for everyone. What I wanted was one bot covering the reliable tools for the most common challenge types — so the question becomes "what do I know about this target?" instead of "where do I even start?"

That's Discord OSINT Assistant. 31 slash commands across 8 categories, results in the channel where the whole team sees them. No divergent environments, no "which Python version do you have", no shared credentials in chat.

Building a secure, feature-rich development environment shouldn't require weeks of configuration and security research. That's why I created DevBox — an automated provisioning script that transforms a fresh Ubuntu VPS into a production-ready development workstation in minutes.

1min.ai gives you access to 66+ models through one API key. The web interface also exists, and it works, and every single time you use it you're clicking through the same dropdowns, losing your context when you switch models, and there's no way to pipe output anywhere or set a preference that sticks. It's fine for occasional use. It's friction for actual work.

I wanted full control — CLI, persistent configuration, model mixing, conversation management. Not their UX. Mine.

llm-1minai is a plugin for Simon Willison's LLM CLI that plugs 1min.ai's model catalog into the terminal. One key, 66 models, all the LLM framework's tooling on top.

I have an Obsidian vault. I have a Docusaurus site. I wanted most of the vault on the site — not a copy maintained separately, not a manual export, but the actual vault, synced at build time and published directly.

The problem: Obsidian and Docusaurus don't speak the same language. Wikilinks ([[Page Name]]) break MDX. Callouts (> [!note] Title) render as nothing. File paths assume vault-root-relative addressing that Docusaurus doesn't know about. You can't just point Docusaurus at a vault folder and expect it to work.

docusaurus-plugin-obsidian-vault handles the translation. At build time: pull the vault, transform the syntax, copy the assets, generate the sidebars, publish. The vault stays in Obsidian. The site stays in Docusaurus. They sync.

The client message arrives at 10pm. "Can you have a plugin POC ready by morning?" Sure. And then you spend the next 45 minutes getting your local PHP to match the right version, untangling why WP-CLI can't find your config, tracking down why email testing isn't working, and fixing permissions that WordPress keeps silently breaking.

The plugin itself takes 40 minutes. The environment setup takes longer. That's backwards.

After enough "by morning" requests across hundreds of plugins and dozens of themes, I stopped tolerating the setup tax. WP Quick Dev — one script, make install, done. WordPress 6.0+ on PHP 8.2, MariaDB 11.0, WP-CLI, phpMyAdmin, and Mailpit, all up and running in under 60 seconds. Then the actual work starts.

Year 1: Ship features in days. Year 3: Same features take weeks. Year 5: You're afraid to touch anything.

Sound familiar? What if your codebase could maintain constant velocity regardless of size? That's the promise of black box architecture—and now you can teach your AI assistant to think this way automatically.

As an autodidact solver, developer, architect, and CTF jeopardy competitor working across digital investigations and security operations, I kept running into the same problem: fragmented knowledge. Every investigation meant digging through scattered bookmarks, old notes, and half-remembered techniques.

Every new team member needed months to learn the same procedures. Every case required rebuilding the same templates from scratch.

Claude Skills are reusable, versionable “capsules” of task-specific instructions plus optional files and scripts that Claude can load on demand across Claude.ai, Claude Code, the API, and the Claude Agent SDK. They’re built as simple folders (with a SKILL.md manifest) that encode your team’s procedures and resources so Claude can act consistently in your real workflows. Skills are rolling out for paid plans (Pro/Max/Team/Enterprise) and can be enabled by admins for org-wide use.

Have you ever seen something like https://orcid.org/0000-0002-1825-0097 in a GitHub profile and wondered what it was? Or noticed those mysterious DOI badges on some repositories?

Today, I'll show you how to transform your GitHub repositories from "just another repo" into citable, trackable publications that can boost your professional profile.

CTFd is genuinely good software. It's also a whole thing to deploy, and the managed hosting costs money, and the free tier has limits, and now you're maintaining infrastructure for an event that runs once a quarter for thirty people who are already in your Discord server.

The "pin the challenges in a channel, DM me your answers" approach works exactly once before someone complains about fairness, someone else asks for a hint publicly, and the leaderboard becomes a spreadsheet you're updating by hand at midnight. Life is too short.

So I built the platform inside the place where everyone already was. Discord Judge Bot — challenge creation, submissions, hints, leaderboards, and digital badge issuance, all in slash commands.

The team channel already had the rekognition bot for images. Someone asked if we could get AI in there too — not a link to ChatGPT, not "go use your own account", but actually in the channel where the conversation was happening. Results visible to everyone, model selection available to anyone, no one managing their own API keys.

That's Discord AI Assistant. One /ai slash command, 12 models on a dropdown, routed through 1min.ai so there's exactly one API key to manage. GPT-4o, Claude Sonnet 4, DeepSeek R1, Gemini, Grok, Sonar — whoever in the server needs a model, picks it from the list.

I'm old and slow. Not elderly — just, by the time I've got five tabs open, uploaded to a face tool, waited for the result, and figured out what the confidence score actually means, the moment's gone. The CTF clock is ticking and my teammates are staring at me.

What I actually wanted was /rekognition compare in the team channel. One command, answer visible to everyone, no browser tabs, no copy-pasting face URLs into some website that charges per lookup. Just: does this face match that face, yes or no, confidence score attached.

That's the whole idea. discord-amazon-rekognition wires AWS Rekognition's full analysis pipeline into two Discord slash commands. Face comparison, OCR, object detection, celebrity recognition, content moderation — all available without leaving the channel where the conversation is actually happening.

In an era where web hosting typically costs $10-30 per month, it may seem impossible to host a professional website for free. However, with the rise of JAMstack architecture and static site generators, completely free, production-ready hosting is not only possible but increasingly popular among developers and organizations worldwide.

Looking to sharpen your cybersecurity skills? Whether you're a beginner or an experienced professional, these platforms offer hands-on challenges that will test and improve your abilities across various domains of information security. From pwn, web exploitation to OSINT investigations, here's your complete guide to the best CTF platforms and training games available. You can also find few games for all levels on my Discord

Meta-prompting leverages Claude's analytical capabilities to systematically improve prompt quality through iterative refinement. This technique transforms prompt engineering from manual trial-and-error into a structured optimization process, yielding measurably better outputs with reduced development time.

When I first discovered the Basel Institute LEARN platform, I wasn't sure what to expect from free online courses about financial crime investigation. After completing most of their self-paced eLearning modules, I can confidently say this is some of the most practical and valuable training I've encountered in the field.

I’m a dinosaur developer, and honestly, I wasn’t that into AI-coding until now.

Imagine coding with an AI partner that doesn’t just write code, but helps you plan, debug, and automate your workflow—all within VS Code. That’s Kilocode: a lightning-fast, open-source AI agent built to boost productivity, whether you’re just starting out or already deep in the dev world.

A curated collection of the most valuable resources for learning and mastering prompt engineering techniques, frameworks, and best practices for AI-assisted development.

Effective AI prompt engineering requires precise action verbs to eliminate ambiguity and improve output quality. This cheatsheet categorizes 60+ essential verbs across eight functional domains with comparative examples demonstrating improved prompt construction.

The field of prompt engineering for code-specific applications has evolved rapidly between 2023-2025, with substantial empirical evidence demonstrating 20-55% productivity improvements across major development tasks. This comprehensive research synthesis examines peer-reviewed studies, industry implementations, and academic findings that establish prompt engineering as a transformative force in software development, backed by rigorous empirical evidence and quantitative performance metrics.