I work in cybersecurity and build tools that make investigations clearer and repetitive work shorter. Off the clock, I connect the dots in my Zima homelab. The robot has other plans. 🛠️
Quick routes: Field guide · Toolkit
Choose your first stop:
| Your mission | Follow this thread |
|---|---|
| Follow a signal | Open the live dashboard |
| See a tool in action | Document investigation · Offline field trip |
| Explore self-hosting | Inside the Zima homelab |
| Bring a little chaos | Explore the live lab |
| Mission | Tool |
|---|---|
| Trace an IOC | SwiftIOC |
| Inspect a file | IOC Inspector |
| Save a page | Downloader |
Follow an indicator back to its source. A Python pipeline collects threat feeds and vulnerability reports; the dashboard keeps their evidence in view.
Retained records from a saved feed snapshot · Collection details
12 seconds at the evidence desk
Recorded October 17, 2026. Open the dashboard for current records.
Find the clues in a suspicious document. Inspect PDFs and Office files, extract IOCs, and export a readable report. Optional threat enrichment adds context.
A harmless training PDF, a few hidden clues, and the real scanner. What can you spot?
Take a little piece of the web offline. Save pages and assets with working local links. Add Playwright rendering when a page needs JavaScript.
My Zima homelab is where side projects become everyday tools. Docker Compose connects media requests, libraries, photos, dashboards, and monitoring.
Curated services, illustrated handoffs · Public manifest
| Area | Services |
|---|---|
| Media & automation | Jellyfin, Jellyseerr, Radarr, Sonarr, Prowlarr, Bazarr |
| Downloads | Transmission, Gluetun |
| Photos | PhotoPrism |
| Books & audio | Shelfmark, Audiobookshelf |
| Operations | Homepage, Portainer, custom flow dashboards |
| Monitoring | Uptime Kuma, Glances, Dozzle, ntfy |
Next checkpoint: turn the lab lessons into a modular Compose starter kit that someone else can bring online by following the docs. ⚙️
The tools do useful work. Hacker Bender handles the side quests. Crack today’s code, or find the secret terminal.
Step inside, press /, and type help. The terminal, saved progress, and collectible patches live in the lab.
Calendar totals include automation and publicly shared private activity. Daily snapshot
Three clues → one code → a tiny creature. Take each gate’s digit, follow the printed route, and open a code hatch.
🔐 Hatch 01 · 254
↺ Decoy hatch. Check the ones digits and the route order. Another hatch awaits.
🔐 Hatch 02 · 791
🔓 Signal recovered. A → C → B gives 791.
| Gate | Clue | Digit |
|---|---|---|
| A | Website Downloader: v2.7.0 | 7 |
| B | Last 30 days / contributions: 361 | 1 |
| C | Stars / selected 3 projects: 249 | 9 |
Next side quest: Explore Website Downloader — the real tool behind gate A.
🔐 Hatch 03 · 928
↺ Decoy hatch. Check the ones digits and the route order. Another hatch awaits.
⏪ Checkpoint rewind · what changed?
Snapshots: 2026-11-02 19:30:23 → 2026-11-03 17:04:45 UTC. Comparing the three selected public projects.
| Project | Signal | Before | Now |
|---|---|---|---|
| SwiftIOC | latest commit at | 2026-11-02T12:56:42Z | 2026-11-03T15:49:06Z |
| Website Downloader | stars | 231 | 232 |
A fresh puzzle from public signals each day. Snapshot & creature fingerprint.
GitHub Actions refresh the public project signals and daily puzzle. Case files and CLI demos refresh weekly or when their recipes change. The artwork keeps its source snapshots close.
Today / lifetime · approximate page hits · Arrival log
Build with curiosity. Leave something useful behind.




