Systems Research & Security Engineering Feed

This catalog organizes field reports across two primary research vectors: hardware firmware reverse engineering and bare-metal self-hosted cloud infrastructure. Full source code, shell bootstrapping scripts, and network topology manifests are included.

[NODE: gw-node01.lan] [5 CANONICAL DISPATCHES] [FORMAT: GHOSTTY / ZED MINIMALISM] [ENCRYPTED SYNC: WIREGUARD]

// LEAD: HARDWARE FORENSICS

2026-07-20 • 8 MIN

[PINNED LEAD] ~/notes/iot-firmware-spi-extraction.md

Reverse Engineering IoT Firmware: SPI Flash Extraction

Extracting binary firmware from an 8-pin SOP SPI flash chip using a Bus Pirate and flashrom to bypass locked-down UART/JTAG interfaces on production microcontrollers.

extract_firmware.sh POSIX sh

flashrom -p buspirate_spi:dev=/dev/ttyUSB0,spispeed=1M \
  -r firmware_dump.bin && md5sum firmware_dump.bin

// LEAD: INFRASTRUCTURE ROUTING

2026-07-15 • 12 MIN

[PINNED LEAD] ~/notes/ha-traefik-docker.md

High-Availability Traefik Router with Docker Compose

Architecting automated TLS wildcard certificate propagation, Docker provider label routing, zero-downtime container updates, and backend health-check failover.

docker-compose.traefik.yml YAML

services:
  traefik:
    image: traefik:v3.1
    command: ["--providers.docker=true", "--entrypoints.websecure.address=:443"]

// CHRONOLOGICAL DISPATCHES ARCHIVE

SELECT ROW TO INSPECT NOTES

DATE	CATEGORY	TITLE / PATH	READ TIME	ACTION
2026-07-10	[#posix-sh]	> POSIX sh vs. Bash: Portability in Modern Scripts	6 min	[INSPECT ↓]
2026-06-28	[#ctf]	> CTF Write-up: Heap Exploitation in glibc 2.35	15 min	[INSPECT ↓]
2026-06-14	[#networking]	> Zero-Trust Network Isolation with WireGuard & OPNsense VLANs	10 min	[INSPECT ↓]

~/notes/posix-sh-vs-bash.md 2026-07-10 • 6 MIN READ • [#posix-sh] [#shell] [#unix]

Analyzing edge-case incompatibilities, syntax overhead, eliminating bashisms, and writing fast, bulletproof bootstrapping scripts for Alpine and embedded targets conforming to IEEE Std 1003.1.

OPEN ENTRY →