Ghostwire: Reading My Own WhatsApp Desktop Without Clicking Through It
How Ghostwire uses a native Windows WebView bridge for local exports and authenticated webhooks, with session, compatibility and queue limits.
Karl.Fail
Projekt
Articles in Projekt.
CitrixPot: My Low-Interaction NetScaler Honeypot and What Actually Hit It
Why I built a low-interaction NetScaler honeypot, how its capture-only stack works, and what real payloads and the private evidence console actually show.
Ultimate Guide to Self-Hosted Dynamic DNS: Ditch DuckDNS for KarlDNS
Stop dealing with expiring hostnames and insecure API tokens. Learn how to deploy KarlDNS, a secure, account-free, self-hosted DynDNS using FastAPI, SQLite…
How I Built a Sub-Millisecond Threat Intelligence API for $0
How I built a free, sub-millisecond threat intelligence API using Node-RED to identify malicious IPs and domains. Stop paying vendors for open-source data.
I Spent 250€ on AI Pentesting Agents (PentAGI, Strix, Xalgorix)
Curious if autonomous AI pentesting actually works? I spent 200€ on OpenAI and Claude APIs to test PentAGI, Strix, and Xalgorix. Read my real-world…
The 2026 Guide to Linux Cloud Gaming: Proxmox Passthrough with CachyOS & Sunshine
Build the Ultimate Linux Cloud Gaming Server: A step-by-step guide to Proxmox, CachyOS, and AMD RX 7900 XTX passthrough. Fixes for Vulkan, Sunshine, and…
ClamAV on Steroids: 35,000 YARA Rules and a Lot of Attitude
Built a scalable ClamAV + 35K YARA rule cluster with FastAPI, HAProxy, and DB storage for fast, insightful malware analysis – born out of…
Typosquatterpy: Secure Your Brand with Defensive Domain Registration
I already wrote a post about how dangerous typosquatting can be for organizations and government entities:
Squidward:Continuous Observation and Monitoring
The name Squidward comes from TAD → Threat Modelling, Attack Surface and Data. “Tadl” is the German nickname for…
Hack the Chart, Impress the Party: A (Totally Ethical) Guide to GitHub Glory
We’ve all been there—no exceptions, literally all of us. You’re at a party, chatting up a total cutie, the vibes are immaculate, and then she hits you…
That One Time I Though I Cracked the Stock Market with the Department of Defense
Seven to five years ago, I was absolutely obsessed with the idea of beating the stock market. I dove headfirst into the world of investing, devouring…
The Day I (Almost) Cracked the Eurojackpot Code
Five years ago, a younger and more optimistic Karl, with dreams of cracking the European equivalent of the Powerball, formed a bold thesis: “Surely…
Flexing on LinkedIn with the LinkedIn-Skillbot
This little experiment wasn’t meant to encourage cheating—far from it. It actually began as a casual conversation with a colleague about just how…
Get an A on Moodle Without Breaking a Sweat!
Ah, Moodle quizzes. Love them or hate them, they’re a staple of modern education. Back in the day, when I was a student navigating the endless barrage of…
Good Morning Berlin: Work Smarter, Not Harder!
Are you like me—a fan of working smarter, not harder, and squeezing every last drop of efficiency out of your day? Do you enjoy multitasking so much that…
The Privacy-Friendly Mail Parser You’ve Been Waiting For
As you may or may not know (but now totally do), I have another beloved website, Exploit.to. It’s where I let my inner coder run wild and build all…
KarlGPT – My Push to Freedom
KarlGPT represents my pursuit of true freedom, through AI. I’ve realized that my ultimate life goal is to do absolutely nothing. Unfortunately, my…
My Home Server: “PrettyLittleKitten” – A Personal Tech Haven
Hardware RAM My server is equipped with a total of 128GB of DDR5 RAM, made up of two Kingston FURY Beast kits (each consisting of 2 x 32GB, 6000 MHz,…
Bearbot.dev – The Final Form
I wanted to dedicate a special post to the new version of Bearbot. While I’ve already shared its history in a previous post, it really doesn’t capture the
Scraproxy: A High-Performance Web Scraping API
After building countless web scrapers over the past 15 years, I decided it was time to create something truly versatile—a tool I could use for all my…
Sandkiste.io – A Smarter Sandbox for the Web
As a principal incident responder, my team and I often face the challenge of analyzing potentially malicious websites quickly and safely. This work is…
Toxic.Best – Raising Awareness About Toxic Managers
Last year, I created a website to shine a light on toxic behaviors in the workplace and explore how AI personas can help simulate conversations with such…
Small business private cloud
In Germany, we’re fortunate to have strong data privacy laws. For small businesses handling sensitive data in the era of remote work, it’s…
Gottor – Exploring the Depths of the Dark Web
Gottor – Exploring the Depths of the Dark Web Welcome to the realm of the hidden, where shadows dance and whispers echo through the digital…
Vulnster – CVEs explained for humans.
Vulnster – CVEs explained for humans Have you ever stumbled upon a CVE and felt like you’d entered an alien realm? Let’s decode it with an…
Bearbot aka. Stonkmarket – Advanced Trading Probability Calculations
Bearbot: Begins This project spans over 3 years with countless iterations and weeks of coding. I wrote almost 500,000 lines of code in Python and…
