jm33.me

What It Is

jm33_ng is a personal cybersecurity research blog. The site describes itself as “cyber security / noob developer / poor English.” Based on the crawled content, it is not a conventional cybersecurity vendor or protection platform, but rather a technical site where the author publishes research on malware analysis, exploitation, red-team tools, low-level Linux/Windows offensive and defensive techniques, and programming. Recent posts cover topics such as a Linux BOF Loader, Linux sRDI in-memory ELF loading, Nim APT sample reversing, and Go malware reverse engineering.

Core Capabilities and Technical Scope

In terms of “protection type,” the site does not provide endpoint protection, cloud security, WAF, SOC, or alerting capabilities. It is better understood as a research-oriented knowledge base. Its content covers topics such as C2, Cobalt Strike, shellcode, reflective loading, rootkits, LPE, RCE, Ghidra, and x64dbg, clearly targeting offensive security research and reverse engineering. On the deployment side, the About page says the site once ran on a Vultr Tokyo KVM VPS, later migrated to GitHub Pages, and uses Cloudflare for CDN. The site is built with Pelican and pelican-bootstrap3. Compliance certifications, management alerts, and enterprise integration capabilities are not mentioned in the main content.

Pricing and Availability

The content contains no commercial pricing, subscription, licensing, or paid service information, so it should not be treated as a purchasable security product. Available access channels include RSS, GitHub, Twitter, Mastodon, LinkedIn, email, and comments, with Disqus mentioned as the commenting system. For readers, the main cost is the technical barrier to reading and understanding the material, rather than any procurement cost.

Pros and Cons

The main advantage is the site’s technical depth, especially around Linux in-memory loading, ELF Loader, BOF, C2, and malware reverse engineering. It is suitable for researchers who want to follow practical, hands-on technical details. The site is also lightweight in structure and has a rich set of article tags. The drawbacks are also clear: it does not provide a closed-loop enterprise security protection offering, nor does it include an SLA, alerts, a console, compliance evidence, or vendor support. Some content leans toward offensive techniques, so beginners and users in compliance-sensitive scenarios should distinguish carefully between research and practical use.

Who It’s For and Access from China

It is suitable for practitioners or students in red teaming, penetration testing, reverse engineering, malware analysis, and system security. It is not suitable as a direct substitute for enterprise security products. Access from China cannot be confirmed based on the available text alone. Because the site uses components such as GitHub Pages, Cloudflare, and Disqus, actual accessibility and stability may depend on the network environment. If Chinese-language alternatives are needed, readers can refer to FreeBuf, 安全客, 奇安信攻防社区, or technical blogs from domestic security vendors.