Building a Local-AI Bug Bounty Lab — and Where I Learned Not to Trust It

I connected an AI-driven recon tool to a self-hosted LLM running on my own GPU, drove it from a Kali attack VM, and pointed it at a ClassicPress target on a segment I control. Cross-host inference, a VRAM wall, a clean run against the wrong target, and the lesson I keep relearning: a local model is a lead generator, not an oracle.

August 4, 2026 · 9 min · Angus Dawson

GOAD-Light — Building & Troubleshooting an Active Directory Pentest Lab

Setting up Game of Active Directory (GOAD-Light) on Windows 11 with VMware Workstation and Vagrant — and the real story behind it: troubleshooting the VMware utility, the launcher’s provider bug, a missing plugin, host-only networking, and provisioning failures that stood between me and a working AD lab.

July 29, 2026 · 5 min · Angus Dawson

Pentest workflow (Windows AD)

Step-by-step notes from a homelab penetration test: discovery, enumeration, Kerberos user discovery, brute force, and admin shell with Evil-WinRM. Includes commands used and outputs captured during the exercise.

September 18, 2025 · 2 min · Angus Dawson

Splunk Enterprise — Windows Homelab Deployment

Centralised logging and detection engineering in my Windows homelab using Splunk Enterprise and Universal Forwarders.

September 18, 2025 · 2 min · Angus Dawson

Windows Server with Active Directory (AD) — Homelab

Overview of my Active Directory homelab: domain setup, users, security exercises, and next steps for monitoring and detection.

September 18, 2025 · 3 min · Angus Dawson