Python
Replaying a sniffed port knock, then watching SPA refuse the copy
A browser lab and a Docker lab let you sniff a port knock and replay it to get in, then see Single Packet Authorization refuse the same kind of copy.
JavaScript · Docker · iptables · Packet Analysis · Python · Shell · Linux
llm-in-browser
A small language model chatting locally in the browser: SmolLM2-360M, LoRA fine-tuned, runs over WebGPU through a patched Rust/WASM runtime with no inference server, while a second Rust/WASM module retrieves evidence from a fictional research-station knowledge graph. Every answer shows the facts it used. The technique first shipped inside stix-meta-explorer's STIX assistant; this is it on its own, with the whole pipeline from graph generation through training, evaluation and browser proof published. Experimental, desktop only.
Rust · WebAssembly · WebGPU · TypeScript · Python
![The STIX pattern [file:hashes.'SHA-256' = 'e3b0…'] parses into one comparison tree, and Python, Java and TypeScript each show the same tree.](/posts/stix-rust/cover.svg)
stix-rust
One canonical STIX 2.1 parse: a pure-Rust core for patterns, objects, and bundles, with Python, Java, and TypeScript bindings all producing the same result — where hand-rolled implementations diverge. Patterns now lower to a three-address intermediate representation that renders back to canonical text without loss, the foundation for structural editing and IR-driven matching.
Rust · Python · Java · TypeScript
extensible-client-libraries
A pair of small extensible libraries for interfacing with REST APIs — one synchronous, one async — extracting the dual-path pattern that the AutoFocus client library's second generation was built around, into something not tied to a single vendor's API.
Python · asyncio · aiohttp · REST
mud-engine
Three runs at building a MUD server from scratch, after years of maintaining other people's. The 2019 original is Python; the 2020 rewrite is TypeScript and is really a tutorial — six tagged versions walking from a bare TCP server, through line-buffering socket connections, to player identity, each tag readable on its own. A Node attempt followed. Building the thing you spent 2014 preserving turns out to teach you why it was written the way it was. The arc closes a loop that opened at age twelve inside GodWars.
Python · TypeScript · Node.js · Docker
bitsquat-responder
A small DNS server answering bitsquatted-domain lookups under xinetd — half of a honeypot rig that proved squatted domains catch real attacks.
Python · DNS
![The STIX pattern [file:hashes.'SHA-256' = 'e3b0…'] parses into one comparison tree, and Python, Java and TypeScript each show the same tree.](/posts/stix-rust/cover-still.svg)
