I Spent 250€ on AI Pentesting Agents (PentAGI, Strix, Xalgorix)
Curious if autonomous AI pentesting actually works? I spent 200€ on OpenAI and Claude APIs to test PentAGI, Strix, and Xalgorix. Read my real-world…
Karl.Fail
Blog — Page 2
Practical security research, self-hosting guides and lessons from Karl Machleidt’s homelab.
Monitoring Your Personal Attack Surface with Shodan and n8n
Automate your home network security with n8n and Shodan. Monitor your personal attack surface, scan your DynDNS, and get instant Discord alerts for open ports.
Windows 11 VM Performance: Hardening, Debloating, and Setup Guide
I am currently testing a Windows 11 VM for gaming with GPU passthrough, instead of CachyOS, which I talked about in my previous post. While Linux has made
How I Automated My WoW Nerd Obsession with n8n, Browserless & Python (A Self-Hosting Guide)
In which a grown adult builds an entire self-hosted automation flow just to find out which World of Warcraft specs are popular this week. Priorities?…
Unlocking Full PS5 DualSense Features in Moonlight & Sunshine
There is nothing worse than buying premium hardware and having your software treat it like a generic accessory. I recently picked up a PS5 DualSense…
The 2026 Guide to Linux Cloud Gaming: Proxmox Passthrough with CachyOS & Sunshine
Build the Ultimate Linux Cloud Gaming Server: A step-by-step guide to Proxmox, CachyOS, and AMD RX 7900 XTX passthrough. Fixes for Vulkan, Sunshine, and…
Why I Cancelled ChatGPT Plus: Saving €15/Month with Gemini Advanced
The Switch: Why I Dumped ChatGPT Plus for Gemini For a long time, I was a loyal subscriber to ChatGPT Plus. I happily paid the €23.99/month to…
Forget Google: Build Your Own Search API with SearXNG
Learn how to self-host SearXNG on Proxmox or Docker, use its free search API, and integrate it with Node-RED for OSINT, automation, and…
How to Orchestrate Hetzner Cloud Servers with Node-RED Flows
Learn how to automate Hetzner Cloud with Node-RED. This guide shows step-by-step flows for creating, managing, and destroying cloud workers on demand.…
ClamAV on Steroids: 35,000 YARA Rules and a Lot of Attitude
Built a scalable ClamAV + 35K YARA rule cluster with FastAPI, HAProxy, and DB storage for fast, insightful malware analysis – born out of…
I Tested a Viral Anti-Spam Prompt. It Failed Spectacularly
Okay, I’ll admit it, I was rage-baited into writing this article. Lately, I’ve been spending some time automating all of my LinkedIn tasks. I don’t…
Caffeine & Exploits: Hacking Coffee Machines with Social Engineering
How I hacked dozens of WMF coffee machines using social engineering, default PINs, and a bit of boldness. A fun real-world red teaming story—from free…
