$ whoami

Breaking things carefully,
so they don't break in production.

I run a small security practice, spend too much time inside terminals, and write here about the infrastructure I build, the systems I take apart, and the projects in between.

What I actually do

I'm Adel, a Data & AI leader at BASF, driving global teams, data products, and platform transformation initiatives. Before that, I spent 13 years in cybersecurity across offensive security, incident response, cyber defense, and security leadership, helping organizations stay ahead of threats.

Outside client work, I'm usually neck-deep in a Linux box somewhere, provisioning cloud infrastructure, or fixing something I broke the night before. This site is where the smaller, more personal version of that work lives.

01

Offensive security

Red team engagements, penetration testing, and adversary simulation — finding the path an attacker would actually take, not just the checklist.

02

Cloud & infrastructure

Hands-on Linux and cloud work — provisioning, hardening, and occasionally rebuilding infrastructure on OCI after I've broken it myself.

03

Threat intel & response

Digital forensics, incident response, and zero trust architecture — the unglamorous side of keeping systems standing after something goes wrong.

Blog

SSHole (CVE-2026-123158) — OpenSSH Auth Bypass on Alpine / musl Linux

read entry →

CVE-2026-99999 — Proxmox PwnEscape (Guest-to-Host KVM Escape)

read entry →

CVE-2026-98432 — Linux Kernel IPv4 TCP Use-After-Free (TF Escape) (CVSS 9.8)

read entry →

CVE-2026-94588 — Proxmox TFA Bypass Authentication Bypass

read entry →

CVE-2026-53359 — Januscape KVM Escape (Proxmox / Linux Shadow MMU UAF)

read entry →

CVE-2026-51083 — Proxmox PVE Hash Exposure (Info Disclosure)

read entry →

CVE-2026-71209 — Audiobookshelf Path Traversal & Auth Bypass

read entry →

Hermes Updates My Blog Daily — From GitHub to Vercel

read entry →

Proxmox PVE Race Condition Allows VNC Session Hijacking (CVE-2026-51082)

read entry →

Termix SSH — CVE-2026-79766

read entry →

Video2Player for Android — Open Web Videos in VLC from Firefox

read entry →

Proxmox V-GHOST (CVE-2026-74580) — Critical KVM Escape

read entry →

Scrutiny: SMART Drive Monitoring on Proxmox with a Hub-Spoke LXC

read entry →

Automated backups in Oracle Free Tier

read entry →

Monitoring my Proxmox environment and automated actions with AI

read entry →

¿ZFS on consumer SSDs? Why you should avoid it and how to save your hardware

read entry →

Current Projects

now Reading through the Horus Heresy catalogue, in publication order this time in progress
now Tinkering with a home Alpine Linux setup on spare hardware ongoing
2026 Built a Warhammer 40k reading tracker web app, sorted by era and reading status Link to Website
2025 Packaged Amazon Music as a Flatpak for Linux, Widevine DRM included shipped