Tutorials

Technical guides and walkthroughs.

Hands-on tutorials covering system administration, security hardening, and infrastructure automation.

Learning Paths

Structured series that build skills progressively.

Linux Exploitation Fundamentals

A progressive path from CPU registers to remote exploitation, covering stack overflows, ROP chains, NX and ASLR bypasses on x86 and x64 Linux.

1
x86 and x64 Registers and Calling Conventions beginner
2
The Stack: Memory Layout and Function Frames beginner
3
Redirecting Execution to Hidden Functions beginner
4
Linux Syscalls for Exploit Development intermediate
5
Basic Stack Buffer Overflow on x86 intermediate
6
Stack Buffer Overflow on x64 Linux intermediate
7
Return-to-libc Attack on x86 intermediate
8
Bypassing NX with ROP on x64 Linux advanced
9
ROP Gadget Hunting Toolkit intermediate
10
Bypassing NX with mprotect ROP Chains advanced
11
Bypassing ASLR on x64 Linux advanced
12
Remote Exploitation with Socket Reuse Shellcode advanced
13
Format String Vulnerabilities on x86 intermediate
14
Bypassing GCC Stack Canaries on Linux advanced

Windows Exploitation

Exploit development on Windows, from classic stack overflows through SEH hijacking and egghunter techniques to DEP and ASLR bypasses, culminating in kernel pool exploitation.

1
Windows Stack Buffer Overflow intermediate
2
Windows SEH Overflow Exploitation advanced
3
Windows Egghunter Exploitation advanced
4
Bypassing DEP with ROP on Windows advanced
5
Bypassing ASLR on Windows advanced
6
Windows Kernel Pool Overflow Foundations with HEVD advanced
7
Windows CFG and Hardware-Enforced Stack Protection (CET) advanced

Embedded Systems & Firmware

Build an embedded security lab with Buildroot and QEMU, audit attack surfaces, reverse-engineer firmware, exploit UART consoles and ARM services, and implement secure boot.

1
Cross-Compiling with Buildroot and QEMU intermediate
2
Embedded Linux Attack Surface Analysis intermediate
3
Firmware RE with Binwalk and Ghidra advanced
4
UART and Serial Console Exploitation intermediate
5
Exploiting an Embedded Service: Buffer Overflow on ARM advanced
6
Secure Boot and Firmware Integrity Verification advanced
7
SPI and JTAG Flash Dumping from Hardware advanced

ML for Security

Apply machine learning to security operations: from RAG pipelines and anomaly detection through malware classification, network intrusion detection, and phishing URL analysis with transformers.

1
Anomaly Detection on Linux Audit Logs intermediate
2
Training a ROP Gadget Classifier with XGBoost advanced
3
Malware Classification with Neural Network Embeddings advanced
4
Network Intrusion Detection with Autoencoders intermediate
5
Phishing URL Detection with Fine-Tuned Transformers advanced
6
DNS Exfiltration Detection with Sequence Models advanced
7
Adversarial Evasion of ML Security Classifiers advanced
8
Encrypted Traffic Classification advanced
9
Threat Intelligence Extraction with Named Entity Recognition advanced
10
Binary Function Similarity with Graph Neural Networks advanced

LLM Red Teaming

A progressive path from LLM fundamentals through prompt injection, jailbreaking, and agentic exploitation to structured red teaming methodology for production AI systems.

1
LLM Tokens, Context Windows, and the Attack Surface beginner
2
Prompt Injection from First Principles beginner
3
Jailbreaking: Bypassing LLM Alignment Controls intermediate
4
Indirect Prompt Injection Through Untrusted Data intermediate
5
Tool Use and Agentic Exploitation intermediate
6
System Prompt Extraction and Defense Hardening intermediate

Transformers & LLMs

Build core transformer components from scratch and work through the full LLM pipeline: from tokenization and attention through fine-tuning, alignment, and evaluation.

1
Transformers & LLMs: Series Introduction and Environment Setup beginner
2
Tokenization and Attention from Scratch beginner
3
BERT Fine-Tuning and Position Embeddings intermediate
4
LLM Decoding and Prompt Strategies intermediate
5
Efficient Fine-Tuning with LoRA and Quantization intermediate
6
Preference Tuning with DPO advanced
7
Chain-of-Thought and Reasoning Evaluation intermediate
8
Building a Tool-Calling Agent with RAG intermediate

Tuxscope: Linux Kernel Observability with eBPF

Learn how your Linux kernel works by watching it: ten cumulative labs that build a single eBPF-powered observability tool in Rust, from syscall tracing to container-level visibility.

1
Tuxscope Lab 1: Hello eBPF beginner
2
Tuxscope Lab 2: Syscall Tracing beginner
3
Tuxscope Lab 3: File I/O Observation intermediate
4
Tuxscope Lab 4: Network Monitoring intermediate
5
Tuxscope Lab 5: Tracing Process Lifecycle with eBPF intermediate
6
Tuxscope Lab 6: Observing Memory with Page Fault Tracing intermediate
7
Tuxscope Lab 7: Profiling Disk I/O Latency with eBPF HashMaps intermediate

Android Bug Bounty: Zero to Zero-Day

A progressive path from lab setup to vulnerability discovery on Android, covering APK reversing, Frida instrumentation, IPC attack surfaces, WebView exploitation, native code bugs, and kernel-level research, with a focus on real-world bug bounty methodology.

1
Android Bug Bounty Lab Setup beginner
2
APK Structure, Decompilation, and Static Analysis beginner
3
Dynamic Analysis with Frida intermediate
4
Attack Surface Mapping: Intents, Content Providers, and Deep Links intermediate
5
WebView and Hybrid App Vulnerabilities intermediate

Local RAG Pipeline

Extend a local RAG pipeline with a chat interface, PDF support, live CVE feeds, adversarial defense, and SOC integration, all running on your machine.

1
Build a Local RAG Pipeline with Ollama and ChromaDB intermediate
2
Add a Chat Interface to Your Local RAG Pipeline intermediate
3
Local RAG with PDF Documents intermediate
4
Connect Your RAG Pipeline to Live CVE Feeds intermediate
5
RAG Poisoning: How Adversarial Documents Break Retrieval Pipelines intermediate
6
Run a Private AI Assistant in Your SOC intermediate
7
Evaluating RAG Pipelines with RAGAS and TruLens intermediate

Jun 5, 2026

intermediate

Evaluating RAG Pipelines with RAGAS and TruLens

Build an eval set and measure faithfulness, context precision, context recall, and answer relevancy with RAGAS and TruLens to know if changes actually help.

Technical guides and walkthroughs.

Topics

Learning Paths

Linux Exploitation Fundamentals

Windows Exploitation

Embedded Systems & Firmware

ML for Security

LLM Red Teaming

Transformers & LLMs

Tuxscope: Linux Kernel Observability with eBPF

Android Bug Bounty: Zero to Zero-Day

Local RAG Pipeline

Evaluating RAG Pipelines with RAGAS and TruLens

Run a Private AI Assistant in Your SOC

Binary Function Similarity with Graph Neural Networks

Tuxscope Lab 7: Profiling Disk I/O Latency with eBPF HashMaps

Bypassing GCC Stack Canaries on Linux

A WireGuard Road-Warrior VPN on OpenWrt

Threat Intelligence Extraction with Named Entity Recognition

Building a Tool-Calling Agent with RAG

RAG Poisoning: How Adversarial Documents Break Retrieval Pipelines

Tuxscope Lab 6: Observing Memory with Page Fault Tracing

Encrypted Traffic Classification

System Prompt Extraction and Defense Hardening

Format String Vulnerabilities on x86

SPI and JTAG Flash Dumping from Hardware

WebView and Hybrid App Vulnerabilities

Adversarial Evasion of ML Security Classifiers

Windows CFG and Hardware-Enforced Stack Protection (CET)

DNS Exfiltration Detection with Sequence Models

Secure Boot and Firmware Integrity Verification

Tool Use and Agentic Exploitation

Connect Your RAG Pipeline to Live CVE Feeds

Local RAG with PDF Documents

Add a Chat Interface to Your Local RAG Pipeline

Chain-of-Thought and Reasoning Evaluation

Attack Surface Mapping: Intents, Content Providers, and Deep Links

Phishing URL Detection with Fine-Tuned Transformers

Exploiting an Embedded Service: Buffer Overflow on ARM

Dynamic Analysis with Frida

Tuxscope Lab 5: Tracing Process Lifecycle with eBPF

APK Structure, Decompilation, and Static Analysis

Android Bug Bounty Lab Setup

Windows Kernel Pool Overflow Foundations with HEVD

Network Intrusion Detection with Autoencoders

Malware Classification with Neural Network Embeddings

Bypassing ASLR on Windows

Preference Tuning with DPO

Tuxscope Lab 4: Network Monitoring

Indirect Prompt Injection Through Untrusted Data

Tuxscope Lab 3: File I/O Observation

Efficient Fine-Tuning with LoRA and Quantization

Bypassing DEP with ROP on Windows

UART and Serial Console Exploitation

Tuxscope Lab 1: Hello eBPF

Tuxscope Lab 2: Syscall Tracing

Jailbreaking: Bypassing LLM Alignment Controls

LLM Decoding and Prompt Strategies

BERT Fine-Tuning and Position Embeddings

Tokenization and Attention from Scratch

Transformers & LLMs: Series Introduction and Environment Setup

Multi-Tenant GPU Isolation

Prompt Injection from First Principles

Ollama: Run LLMs Locally

Linux Exploitation Lab Setup

LLM Tokens, Context Windows, and the Attack Surface

WebMCP Attack Surfaces

Container Escape: Namespace and Privilege Breakouts

Training a ROP Gadget Classifier with XGBoost

Embedded Linux Attack Surface Analysis

Firmware RE with Binwalk and Ghidra

Cross-Compiling with Buildroot and QEMU

Anomaly Detection on Linux Audit Logs

Build a Local RAG Pipeline with Ollama and ChromaDB

Writing Your First Wazuh Custom Decoder and Rule

Recovering from a Pop!_OS Kernel Panic on System76

Windows Egghunter Exploitation

Windows SEH Overflow Exploitation

Windows Stack Buffer Overflow

Remote Exploitation with Socket Reuse Shellcode