Dev mode — no Cloudflare Access header present. Authenticated as dev@local.
EPL
dev@local

Engagement Platform Labs

A 2-day hands-on workshop. Build a complete red-team engagement platform from a ~$50 hardware kit: custom OpenWrt firmware, Tailscale mesh, Cloudflare Workers, D1, KV, R2, and a covert ChatOps control surface. Every component under your control. No black boxes.

The capstone ties it together: send a food-emoji command in Discord, watch it decoded by a Worker, dispatched over Tailscale, executed on a remote Mango, and returned as a signed R2 URL — every step logged in D1.

What you will build

Four core primitives. All running on the same stack this site uses.

Tailnet command exec

Issue a command over the Tailscale mesh to a remote device and receive structured output back — no open ports, no VPN gateway.

Signed-URL artifact handoff

Upload a network capture or payload to R2 and generate a short-lived signed URL. Recipients get exactly what you send, nothing more.

ChatOps decode

Encode commands as food emoji using the EmojiChef 6-bit scheme. A Discord message triggers a Worker, which decodes and dispatches — covert channel, compliant audit trail.

Audit trail

Every command, every validate, every artifact retrieval written to D1. Structured, queryable, and self-hosted on the same Cloudflare stack the course teaches.

Hardware kit

Everything included. You keep it after the workshop.

  • GL.iNet Mango (GL-MT300N-V2) — Drop device — custom OpenWrt firmware, ExtRoot, Tailscale node
  • USB flash drive (16 GB+) — ExtRoot overlay — persistent services across firmware updates
  • USB UART adapter (3.3 V) — Serial console — failsafe recovery, U-Boot interaction
  • Laptop + devcontainer — Engagement platform — ImageBuilder, Tailscale node, CF Worker dev

Quick links