Cyberbits

  • Metasploit for beginners + hack a Linux box

    Introduction Short course I found on Coursera giving me some Metasploit basics. Already covered a lot on THM. Expanded quite a bit on this short course, to be able to present to you the below write up. Setup Create a lab with: I’m running on a Mac. Recon Find out what we’re working with. Note:…

  • TryHackMe SEC0 quick win

    Introduction I’ll be honest. I didn’t need to do this one. The TryHackMe SEC0 (Pre Security) certification is entry-level by design. It covers the basics: how the web works, networking fundamentals, Linux essentials, and a gentle intro to how attackers think. Nothing that was going to surprise someone who’s already spent years in platform engineering…

  • Install Metasploit on Mac with a database

    Introduction Kali Linux or ParrotOS are probably still the best ways to use Metasploit (in a VM or not) but I really wanted to give it a spin on Mac. It’s not too difficult, but there are a few caveats. First of all, we’ll have to update this guide after 01-09-2026: Deprecated because it does…

  • Self hosted cybersecurity dashboard

    Introduction I’ve been struggling for a while to find a good central place to keep up with cybersecurity news. I tried RSS readers, I tried newsletters, I tried a few aggregator sites. Nothing really stuck. Either the UI annoyed me, or the sources were too broad, or I’d end up with the same story duplicated…

  • Running LLMs locally

    Introduction A while back I realized that you can’t do serious cybersecurity work in 2026 without understanding AI. Not as a nice-to-have, but as a baseline. So I made it part of my goals. And one of the first things I wanted to get right was running models locally, on my own hardware, under my…

  • AI Deep dive – Part II

    Introduction When you write a part I, you’ll need to write part II as well. Let’s pick it up where we left it last week. Model parameters When you call a model API, you can pass parameters that control how the model generates text. These are not settings that change the model’s knowledge or capability.…

  • AI Deep dive – Part I

    Introduction Following my Google AI adventure, I left the course and certification unsatisfied. Therefore I’ve researched some more of the technical aspects of AI. Since it is a lot (I simply had A LOT of questions), I’ll divide it into two posts. Model landscape When people talk about “AI models” today, they almost always mean…

  • Google’s AI course and certification

    Introduction My cybersecurity adventure is still my number one priority, but since I think it would be foolish to ignore AI during this quest, I will take the occasional detour. I recently worked through Google’s AI Professional course, which was recommended at a couple of places to be a must have. A nice, professional certification…

  • Separation of concerns of VPS and Docker apps

    Introduction I’ve been working on a clean, reusable setup for running my own apps on a Virtual Private Server (VPS), specifically on Hetzner Cloud. The result is three open source repositories that take you all the way from bare metal to running Nginx, WordPress, and Nextcloud behind a proper reverse proxy, with automatic SSL certificates…

  • Automated secured Hetzner VPS

    Introduction A few weeks ago we setup a cool VPS with WordPress, Traefik, etc. in an automated way. The only downside was that is could not be managed with the same code (only setup once), as explained in the post. Today we’re setting up a complete, automated WordPress hosting solution using OpenTofu, cloud-init and Ansible;…