Isolating a Pentest Lab the Right Way: VLANs, Default Deny, and Proof
Challenge: run offensive security tools at home without any risk to the production LAN. Action: built an isolated Kali segment behind a dedicated VyOS
Projects
$ ls writeups/ --tag projects
Recovering a Dead Server BMC: From Wedged IPMI to CH341A Chip Flash
Challenge: a production server's BMC was bricked - no remote console, no out-of-band management, stuck boot. Action: pulled the socketed SPI
Building a Segmented Home Lab: Arista Switching + VyOS Routing
Challenge: a flat home network gives zero practice for enterprise security operations. Action: designed a multi-VLAN lab on Arista EOS with VyOS routing