Published file metadata, source observations, indicators, and research history in one bounded catalog.
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
1 sources: 0 stale, 0 needing attention, 0 paused, 1 unverified.
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.
Managing OpenVPN via nmcli provides a streamlined, scriptable alternative to manual configuration, particularly in CLI-only environments. This guide covers importing configurations, securing credentials, and managing routing using NetworkManager.
First reported Apr 17, 2026 07:22 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordImagine you have established a shell on a Linux server. Suddenly, you see another user log in. You want to kick them out immediately to prevent them from investigating, but you must ensure your own connection remains stable. Traditional tools like iptables can be clumsy for this, often requiring complex rule management or risking a lockout of your own session.
First reported Feb 18, 2026 16:10 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordWe’ve all been there: a project builds perfectly on your laptop, but the moment your colleague clones it, everything breaks. For years, containers (like Docker) have been the go-to solution for this. But what if you want stronger hardware-level isolation, real persistence for your development environment and the ability to literally “ship your machine” as a single executable file? There comes Smol
First reported May 18, 2026 09:04 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordIn a previous blog post I presented Portainer, a simple Docker stacks management interface. One of the nice features of Portainer is the possibility to create webhooks to automatically update existing stacks. In this post I’ll show how to combine this feature with GitLab pipelines to implement continuous deployment of Docker stacks.
First reported Aug 27, 2025 09:28 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordOn this post we will show basic usage of Wireguard on OPNSense. This is a new addition to our VPN series:
First reported Feb 21, 2026 13:54 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordPandoc is a free and open-source document converter that can convert various markup languages into different formats. It supports conversion from and to formats such as Markdown, reStructuredText, LaTeX, HTML, Word docx, and more. It is an incredibly powerful tool, which we use extensively to create PDF slides or reports from easy to maintain markdown sources. Pandoc is also highly customizable th
First reported Jun 24, 2025 12:31 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordIf you’re planning to perform an ARP spoofing attack, you’ve probably encountered bettercap. If you’ve already set up a lab to experiment with ARP spoofing, you may have stumbled upon an issue where the internet is not reachable on your target. In this post, we’ll explore the root cause of this issue and provide a step-by-step guide to resolve it.
First reported Apr 07, 2026 08:08 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordIn the last years, the price of data storage has dropped significantly. However, in the same time the amount of produced data has literally exploded. Moreover, a lot of stored data is actually copies of each other.
First reported Jan 22, 2025 10:27 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordToday we participate in the research day of the Royal Military Academy.
First reported Sep 12, 2025 11:18 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordYou want to access your home network securely from a coffee shop? Or perhaps you need to browse the internet from abroad as if you were sitting in your living room? In this guide, we will set up a Tailscale Exit Node on a Raspberry Pi. This routes your internet traffic through your home connection, providing privacy and access to local devices without the headache of port forwarding.
First reported Feb 19, 2026 09:05 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordOpenVPN is an extremely powerful and secure VPN solution! But it requires multiple certificates and a little work to configure. Here is a step-by-step guide to get an up-and-running client-server (aka road warrior) OpenVPN on OPNSense.
First reported Dec 20, 2025 21:53 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordA few weeks ago we had the opportunity to visit the Technology Advancement Center (TAC). The TAC is a nonprofit organization located in Columbia (Maryland, U.S.) and focused on addressing critical cybersecurity defense technology challenges. TAC serves as an intermediary and helps connect U.S. Cyber Command (USCYBERCOM) and the U.S. government to the people, products and solutions needed to advanc
First reported Dec 09, 2025 13:35 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordIn red-blue team attack scenarios, testing threats and attacks on isolated machines can make detection overly simplistic. This is because the attacks are the only activity on the network, which does not accurately reflect real-world conditions. In reality, cyberattacks often occur during working hours and blend seamlessly with normal user activities. The larger the organization, the more extensive
First reported Mar 10, 2025 07:58 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordOPNsense is a powerful open-source firewall and network security platform that offers a wide range of features and tools for securing your network. One of the key benefits of OPNsense is its extensive API, which allows developers and administrators to automate and integrate various tasks and workflows into their existing infrastructure. In this blog post, we’ll explore how to interact with the OPN
First reported May 27, 2025 08:42 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordOut-of-band management is a powerful but sometimes overlooked feature of modern servers. In this blog post I’ll showcase some of the features of iDRAC, the out-of-band management system you can find on DELL servers.
First reported Mar 10, 2025 16:39 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordWhen working on a large project, it can be useful to split the code into multiple plugins or extensions. It makes it easy to add functionalities by simply adding a file to the project. Here is a simple example.
First reported Jan 20, 2026 13:42 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordHaving trouble with Python pip? Here is a crash course on pip and its cousins!
First reported Dec 17, 2025 14:05 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordIn today’s digital age, email has become an essential tool for communication in both personal and professional settings. With the rise of remote work and global collaboration, emails are widely used to communicate between colleagues, external partners, and clients.
First reported Apr 11, 2025 14:48 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordWe were recently asked to inboard a large amount of users with pre-selected passwords to one of our Overleaf Community Edition instance. The web UI of Overleaf CE only allows adding users one by one (with their email address), and the included NodeJS scripts (accessible from inside the sharelatex container) do not allow admins to specify a given password for a fresh user. We ended up adding users
First reported Nov 20, 2025 17:16 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordWhen analyzing Linux kernel exploits, observing malware behavior in a controlled environment is the best way to build robust detection. The copy.fail vulnerability is a great case study in how attackers can abuse specific kernel mechanisms and sockets to escalate privileges. In this post, we’ll walk through setting up a safe, isolated environment using Vagrant, running the exploit and using eBPF (
First reported Sep 03, 2026 16:43 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordCurious to observe every process invocation on a Linux system? This article will walk you through building a minimal eBPF program that attaches to the execve syscall using libbpf and CO-RE for portability across kernel versions. It covers compiling with Clang, setting up a ring buffer for efficient event transmission, and writing a simple C loader to manage initialization and execution, all withou
First reported Apr 09, 2025 13:18 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordThe Windows registry is a gold mine of information when performing forensics analysis. Among others, it keeps track of all recently opened files by the user, for example to populate the ‘Recommended’ section in the start menu, or the ‘Recent’ list Windows Explorer.
First reported Oct 23, 2025 09:37 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordIn a previous blog post I evaluated the performance penalty of virtual storage. This time I’m focusing on distributed storage, and more precisely on Ceph. This will be a series of 2 blog posts. In this first part, I will show the installation process. In the second part I will present the performance comparison…
First reported Mar 21, 2025 14:48 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordIf you’ve ever tried running a program on Linux and encountered this error message then you’re familiar with the frustrating issue of missing or mismatched glibc versions. This specific error occurs when a program requires a version of the GNU C Library (glibc) that isn’t installed on your system, or is incompatible with the one you have. In this post, we’ll dive into the steps to resolve the issu
First reported Jan 15, 2025 14:39 UTCCatalog metadata updated Oct 08, 2026 03:43 UTCOpen evidence recordA filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.