Inside a DDoS Botnet's Command Channel, by Accident
A non-executing honeypot, a firecracker lab and one wrong port: how a 70 line fake bot of mine ended up logging live DDoS commands.
NixOS
Follow the thread. Read the stories.
2026
Agentic Rescue: A Linux Rescue Stick with an Agent Inside
A NixOS rescue ISO with opencode, Claude Code and Codex, plus a configuration slot you can patch in your browser.
Tonight at the Nuremberg Claude Code Meetup: How I Accidentally Became #2 VDP Researcher for Germany on HackerOne
Tonight, April 16th 2026 at 19:20, i’m giving a talk at the Nuremberg Claude Code Meetup. The title: How I Accidentally Became #2 VDP Researcher for Germany on HackerOne Slides are here: no2vdp.bett.ag And yes, the #2 part is real. This…
From Contract Dev to AI-Powered Bug Bounty Hunter: How I Automate the Offensive - 1 Month Update
one month ago, i wrote about pivoting from freelance development to AI-powered bug bounty hunting. i started with “valid duplicates.” here’s where the rig stands today. From Duplicates to CVEsCVE-2026-1190 (KeyCloak) my agents found a…
2025
From Contract Dev to AI-Powered Bug Bounty Hunter: How I Automate the Offensive
Let’s be real for a second. The project market for freelance developers in Germany right now? It’s basically dead. The economy is weird, budgets are frozen, and everyone is sitting on their hands. But i’m not the type to sit around. For…
2023
Switching to hexo.io
After trying to upgrade my Jekyll version from two years ago, and failing miserably, i decided to look for alternatives. Meet Hexo.ioWhat is it? it’s basically jekyll written in JavaScript it just works with jekyll Markdown files…