Blog
nyxr's web UI shows the scan
What the nyxr web UI gained after v0.17.1: the v0.18.0 HORIZON page, and the v0.19.0 network map, packet explainer, search and evidence trace.
November 4, 2026
Sailwing: wind on the map, sails in your hands
A browser sailing-trim and race-navigation tool. Live wind, sail trim, a course planner and a phone navigator that stays off land and shallows.
October 26, 2026
Austin GP 2026: practice & qualifying telemetry and race prediction for Verstappen, Antonelli and Leclerc
Interactive telemetry, mini-sector map, lap replay and a model race prediction for Verstappen, Antonelli and Leclerc at the 2026 United States Grand Prix.
October 25, 2026
docker-builds: a commix image, plus new Metasploit, MVT and PocketBase
docker-builds now ships a multi-arch commix v4.1 image, and Metasploit Framework, MVT and PocketBase move to their latest upstream releases.
October 25, 2026
How to get the full domain allowlist for pulling Docker images
Use crane logs to build a minimal proxy allowlist for Docker image pulls.
December 20, 2025
How to fix Formula1 or how to make F1 even more exciting sport.
I have one idea on how to fix Formula 1. If we want racing to be more fair, we should have the same cars for every driver. So, the idea is that drivers’ points will be counted as they are now, with a certain amount of points awarded for each race and position. However, the constructor championship will not be calculated as the sum of drivers’ points in the same team.
June 2, 2023
F5 BIG-IP iControl REST vulnerability CVE-2022-1388
Discovered F5 BIG-IP iControl REST vulnerability CVE-2022-1388 before it was published.
May 9, 2022
How to find a vulnerable server on the internet?
Using Tor, Shodan and an nmap NSE script to show how many Citrix ADC gateways were still exposed to CVE-2019-19781 in January 2020.
January 24, 2020
.grsec patch size_overflow
How switching an int to size_t in a grsecurity n_tty patch lets a negative value wrap into a huge one, and a quick fix.
April 29, 2016