Nick Zero

Posts

2026

  1. Automating Exploit Discovery with MCP: Ghidra, WinDbg and a Very Broken TCP Server

    We wire Ghidra and WinDbg into an LLM over MCP, point it at a stripped binary with ASLR and DEP switched on, and let it work its way to a pop calc.

    15 min read exploit-dev

2022

  1. Automating a Red Team Lab (Part 2): Monitoring and Logging

    Let's take the infrastructure we made in part 1, and add some logging and monitoring so we can see what's happening behind the scenes.

    8 min read infrastructure

  2. Automating a Red Team Lab (Part 1): Domain Creation

    We'll go over how to build a basic AD setup using infrastructure-as-code to deploy a consistent lab every time.

    17 min read infrastructure