Blog

security research, infrastructure deep dives & ctf writeups

Building a Production Mail Server on Kali Linux from Scratch

A full walkthrough: Postfix setup, Brevo relay configuration, DKIM key generation, SPF/DMARC record publishing, and testing deliverability — all on a custom domain.

2026-06-2912 min readread →

in the works

drafting

GoPhish Lab: Simulating a Phishing Campaign End-to-End

Setting up GoPhish, crafting convincing lure emails, building credential-capture landing pages, and what the data tells you about human vulnerability.

drafting

SPF, DKIM, DMARC — What They Actually Do and How to Break Them

Not just definitions — a practical look at how email authentication works at the packet level, and what happens when each record is misconfigured.