News From Outer Space
This article could also have title: how we discovered automation for the fifteenth time, renamed it AI, panicked, bought six dashboards and forgot about the Windows 2008 server in the basement. I’ve been running this blog for quite a while, and most of what I publish here is technical: guides, projects, reviews, vulnerabilities, things I
In the previous episode, I replaced Discord webhooks with Gotify . That solved where my infrastructure notifications should go. It did not solve who was supposed to notice that a VPS was running out of disk space, waiting for a reboot or quietly collecting failed systemd units like
Because apparently I needed an app for changing app icons. I have a growing collection of small tools that were originally created only for myself. Usually something annoys me just enough that I start thinking about automating it, and these days AI makes it dangerously easy to turn such thoughts into actual applications. A few years ago
Some time ago I wrote a small script for myself because I wanted an answer to one very simple question: Did I accidentally do something stupid on this VPS? Which, to be fair, is a question worth asking from time to time. I run different things on my servers. Websites, databases, Tor services, monitoring, random
For a long time I used Discord webhooks for notifications from my services. It was easy, it worked and almost every application knew how to send something to Discord. Create a private channel, copy a webhook URL, paste it into a service and wait until something breaks. Very advanced engineering. The more services I added, however, the
I got tired of digging through endless cybersecurity “awesome” lists, abandoned GitHub repos, blog posts from 2017, broken links, random tool dumps, and websites that require half a JavaScript framework just to show me one useful URL. So, naturally, I built another cybersecurity list. Yes, I see the irony. No, I will not
This is going to be another chaotic article about analysing network packet captures, except this time it is not about OT, ICS, SCADA, PLCs, HMIs, or other industrial things that can break if you look at them too aggressively. This time it is about regular IT network traffic. So, yes, apparently I still hate analysing PCAP files,
This is going to be a chaotic article about analysing packets collected on an OT network, with a brief mention of how much I dislike networking topics. If that sounds boring to you, don’t read any further! I’m a full-time penetration tester and red teamer, and a part-time
A few years ago I wrote a guide about using GPG from the command line. It explains how OpenPGP works, how keys work, and what is actually happening when you encrypt or sign data: Easy GPG That part hasn’t changed. GPG is still the same — powerful, flexible, and a bit annoying to use on a daily
I was looking for something to keep findings, scan results, and reports in one place instead of dumping everything into a notebook. For pure bug bounty work, I still think a normal notes app such as Obsidian is often enough. It is faster for testing, writing down ideas, storing screenshots, and preparing a
This month, I am organising my scripts for various automations, tweaking them up and sharing - maybe someone will find them useful. The impetus for this came from a project in a large organisation that had no ASM (attack surface management) tools in place. The company
Every bounty hunter, security analyst, or hacker has their favorite set of tools and scripts for automation. There are tons of people who share their solutions by providing cool tools, but there are also tons of bounty hunters who have their own arsenal and automation for hunting that they don’t share so as not to compete with each other.
I have always used automation for bounty hunting or quick tests. Automation allows you to run multiple tools one after another without wasting time manually executing commands. There are always two problems. The first is that you have to choose the right tools, not too many and not too few. Tools need to be developed, and any major change can
This article is about building a HexStrike AI Lab with Kali, Fedora, Roo Code and DeepSeek. Enjoy! HexStrike AI popped up in the Parrot 7.0 release notes as a new “AI Tool” category. We are known to have very strong opinions on
Yesterday I bought myself a new VPS. Why not? Also because the other three I have are already at full capacity. I was a Tor relay operator twice in the past, for several years each time. I have now decided to gather all my notes together and review the project requirements once again. I have set up a new relay, hoping that the third time
Currently, my NAS is set up as a Synology DS720+ with two 4TB drives in RAID 1 configuration, plus two 1GB M.2 drives for caching and 6GB of RAM. It is accessible via a Cloudflare tunnel. In the near future, I will set up own NAS using Unraid + custom hardware, and I will describe the process step by step.
Everyone in IT has lots of flash drives. Each one has something different on it. But they’re all important and useful. Sometimes only once a year, but still useful. I decided to tidy up my USB drives and put everything in one place. I thought it would be difficult, but it turns out there is a very cool project called <a
I am a pentester and red teamer at work, and an ethical hacker, blogger, gamer and pseudo-developer outside of work. Sometimes I’m a slacker at work too, but I prefer to call it ‘professional’ – meaning I automate my tasks. If there are no red team activities planned for Friday, I don’t do anything myself because, as we all know, Fridays at
I created this based on various internet sources for a company that is planning to carry out threat modelling. It is a general outline and preliminary proposal that you can adapt to your needs. Hopefully someone will find it useful. Experts in this field may be able to provide more information, but it seems to me that this is not yet a
I recently needed an encrypted container to store files on a Linux virtual machine (Debian 13 with XFCE). I didn’t want to encrypt the entire disk so that it wouldn’t take up too much space, so I decided to create a simple, encrypted container that I could mount and store important files on. Additionally, I wanted to mount it using a ready-made
When the zombie apocalypse comes and the world as we know it ends - when GPT Chat and all other AIs are no longer available online, and even Uncle Google is gone - your own little stupid AI will come in handy. You’ll need to know how to get water, hunt, kill zombies, identify which mushrooms are safe to eat and how to build a base. I guess all
Backing up data is important. Anyone who has ever lost data would agree. There is also a golden rule: “There are two kinds of people in this world—those who back up their data and those who will.” Be smart and start doing this before you lose your data. I currently use Fedora (since <a
Hello, readers of my blog. Today, I would like to present my new baby to you. More specifically, a project that is simply an online library containing PDF files on the subject of cybersecurity. Specifically, it covers pentesting, hacking, tools, red teaming, blue team, forensics, AI, risk, networks, malware analysis, threat hunting, and so on.
As I moved my virtual machines and labs from VirtualBox to Virt-Manager, I shared some tips about my new configuration. Maybe they will be useful for someone else who is also migrating. If you are looking for Windows 11 tips, you can also check out the article Windows 11 virtual machine on
Before I get into the details, I should mention that we are not hacking the Tor network here. We are not breaking the security of the network or the software itself. Also bear in mind that this tutorial doesn’t cover all the ways to hack hidden services. Today, I’m focusing on simple steps that can reveal the IP address of the server hosting
When testing hidden services on the Tor network, I often use torsocks , but sometimes I need to torify all traffic; you can use Whonix Gateway for this, but you can also use
Someone might think, “what has this man come up with again”. I sometimes purchase the pro version of ChatGPT and test its capabilities. As I’ve been doing the SANS SEC565 course recently (highly recommended) and I slowly need to prepare for the
There are those who shout to abandon Google (or whatever big tech company), others shout to abandon closed source software, others recommend not using solutions from large corporations, and you also hear not to use open source or projects created by enthusiasts because they are not secure or of lower quality. And the famous “if it is free, you
I will start the new year with a simple entry. Specifically, monitoring my own services. As time goes by and you have more and more websites or servers that like to stop working from time to time for various reasons, it is worth monitoring their status. Especially when they are sites or services that provide a cash flow. However, whatever the
Some time ago I started migrating my virtual machines from Virtual Box to Virt-Manager. Mainly because of performance, the fact that sometimes things don’t work in Virtual Box as I would like them to, and of course KVM is harder to configure so I’m going to be a real pro h4ck3r and advanced user (ehh…). As is always the case in the world of
Sometimes people try a simple way to hide access to parts of the site using the basic access authentication method based on HTTP user agent. It’s not very sophisticated, or super effective, but you can often come across this solution. It will definitely block a regular user
Boys and girls today I would like to quickly share with you in a nutshell an interesting offer for good quality and affordable VPS servers. There comes a time in the life of every IT guy, whether home-grown, amateur or professional, to do a bit of admin stuff. Set something up from start to finish. You can do it in the comfort of your home, or
You may or may not remember my article Mount Synology NAS in Linux . Being the lucky owner of a Synology DS720+, I sometimes do some interesting things on it besides the standard stuff. And since this site is also my online notebook, I have collected all the things I have configured on my NAS in this article.
I have switched back to Linux as my daily operating system. For virtualisation I have always used Virtual Box and still do, but I have always wanted to try VirtManager . In the past, I was put off by the number of configurations, and there was always something not
Ahh, today is that glorious day when I realize that my plan to write one or even two articles a month on my wonderful blog is failing. And then I remind myself that my worth checking series is not only there to share knowledge and interesting material but also to save my ass in just such situations. To
Everyone knows that I am not a programmer, but yesterday was a holiday in my country and I was doing some tidying up of my notes and todo lists, and one entry was quite old and I thought, ok, it is probably time to complete this task. Holy moly, but how does that relate to programming? Let’s start at the beginning. <img
This is going to get messed up. And, in fact, the goal was order. I recently did some tidying up of my commands and steps for checking a service/pen testing/bounty hunting/hacking/red taming/messing around. I decided to write it down in one place and expand it as needed. Here is my list of steps and tools I use
⚠️ UPDATE I killed this project :( Sometimes I sit down and create pages or things that maybe don’t quite make sense or are alternatives to things that already exist, but done my way. Some things I do for pleasure, some things I do for education, sometimes just to share my insights with others, or uses
Normal people prepare presentations in PowerPoint (or Libre’s Impress or Google’s Slides), but it’s boring. I mean, presentations are generally boring and should only be a background for a speaker, and making them in a software like a PowerPoint makes them even worse (too many options to distract the creator and not focus on the content). Great
Yo yo yo my dear readers. A chaotic article today about several things at once. Because why not. I wasn’t sure if I could handle this month’s article, if I’d write something meaningful or just a quick entry in the worth checking series. Whenever I have a busy month, I always leave an entry until the