>_SPENCERLABSECURITY · INFRASTRUCTURE SERVING FROM THE HOMELAB|0 INBOUND PORTS
GitHub

Archive

All posts

Every write-up and video, newest first.

Built
Builtplanned

Proxmox & GNS3 Homelab Implementation Plan

Build and operations plan for a two-node Proxmox VE cluster with GNS3 network simulation and a Windows-based security workstation.

38 min read
Built
Builtin progress

Aegis Managed VPS — building in the open

A Linux-first, automation-first managed VPS service, in design. Coming soon — the trials and errors of building it will be documented and published here via Fieldnote as the work happens.

4 min read
Pentested
Pentested

LabNet Internal Assessment - UbuntuServ

An authorized internal assessment of UbuntuServ (10.x.x.3) on the isolated LabNet segment, to determine whether the host could be compromised from an attacker already positioned on the internal network.

5 min read
Assessed
Assessed

Authenticated Security Assessment - WinServ

An assumed-breach assessment of WinServ, a Windows Server 2025 file server on LabNet. The department-share RBAC held — but exposed WinRM plus a valid admin credential gave full remote control of the server. 1 Critical, 2 Medium findings.

5 min read
Administered

Active Directory Domain Services

Building a minimal AD DS lab in VirtualBox: a static-IP Windows Server promoted to domain controller for adlab.com, DNS on the DC, and clients joined to the domain — with the DNS and time-sync warnings left open for follow-up.

16 min read
Built
Built

Going live via Cloudflare Tunnel

Every command, manual step, and lesson from taking spencerlab.tech live over HTTPS — including the discovery that the ISP made port-forwarding physically impossible, and the tunnel that solved it.

12 min read