searchi: Find the Damn File
My local desktop search project combines names, keywords and meaning, with document previews, optional agent access and explicit privacy boundaries.
Karl.Fail
Projects
Personal software projects and homelab experiments, with implementation notes, tests and limitations.
Ghostwire: Reading My Own WhatsApp Desktop Without Clicking Through It
How Ghostwire uses a native Windows WebView bridge for local exports and authenticated webhooks, with session, compatibility and queue limits.
CitrixPot: My Low-Interaction NetScaler Honeypot and What Actually Hit It
Why I built a low-interaction NetScaler honeypot, how its capture-only stack works, and what real payloads and the private evidence console actually show.
Ultimate Guide to Self-Hosted Dynamic DNS: Ditch DuckDNS for KarlDNS
Stop dealing with expiring hostnames and insecure API tokens. Learn how to deploy KarlDNS, a secure, account-free, self-hosted DynDNS using FastAPI, SQLite…
How I Built a Sub-Millisecond Threat Intelligence API for $0
How I built a free, sub-millisecond threat intelligence API using Node-RED to identify malicious IPs and domains. Stop paying vendors for open-source data.
I Spent 250€ on AI Pentesting Agents (PentAGI, Strix, Xalgorix)
Curious if autonomous AI pentesting actually works? I spent 200€ on OpenAI and Claude APIs to test PentAGI, Strix, and Xalgorix. Read my real-world…
The 2026 Guide to Linux Cloud Gaming: Proxmox Passthrough with CachyOS & Sunshine
Build the Ultimate Linux Cloud Gaming Server: A step-by-step guide to Proxmox, CachyOS, and AMD RX 7900 XTX passthrough. Fixes for Vulkan, Sunshine, and…
ClamAV on Steroids: 35,000 YARA Rules and a Lot of Attitude
Built a scalable ClamAV + 35K YARA rule cluster with FastAPI, HAProxy, and DB storage for fast, insightful malware analysis – born out of…
Typosquatterpy: Secure Your Brand with Defensive Domain Registration
I already wrote a post about how dangerous typosquatting can be for organizations and government entities:
Squidward:Continuous Observation and Monitoring
The name Squidward comes from TAD → Threat Modelling, Attack Surface and Data. “Tadl” is the German nickname for…
Hack the Chart, Impress the Party: A (Totally Ethical) Guide to GitHub Glory
We’ve all been there—no exceptions, literally all of us. You’re at a party, chatting up a total cutie, the vibes are immaculate, and then she hits you…
That One Time I Though I Cracked the Stock Market with the Department of Defense
Seven to five years ago, I was absolutely obsessed with the idea of beating the stock market. I dove headfirst into the world of investing, devouring…
