Eduard Schwarzkopf

Eduard Schwarzkopf

Latest — Nov 20, 2025

Building a Kali Linux MCP Server That Actually Works

I learn new things best when I actually play with them and apply what I've learned. Model Context Protocol (MCP). The hottest new Protocol on the market! After some head-scratching and iteration, I finally managed to connect my first MCP Server and the best part? It hacks! No, like really,

More issues

I Accidentally Exposed TLS Secrets to GitHub, Let's Learn From It

woopie fucking doo! I exposed secrets to my public GitHub repository. Join me on a ride! This wasn't some complex supply chain attack or sophisticated breach. This was me! Using tools without knowing the impact nor having proper safety nets in place. Here's what happened, how I fixed it, and

Local AI on a GTX 1060: What Could Go Wrong?

NetworkChuck made it look so easy. Just install some TUI tools, run a few commands, and boom – you're an AI wizard! I watched his video about TUI AI tools and thought: "This is it. This is my moment to dive into AI." He wasn't just showing off Ollama running models

Proxmox, use harden!

In the wild world of the Internet, Proxmox is vulnerable like a freshly hatched Caterpie. So let's evolve it into a Metapod and harden it! A default Proxmox VE installation is ready to virtualise, but of course, we want to also increase the security. Because we do not want anybody

Visit from a sad and hot R2D2

Debugging is a crucial skill in the world of software engineering. It is far more common to read code than to write it. Knowing how to approach a problem systematically is what makes a good developer, an even better one. The best part? You can transfer this skill to any

CloudGoat - Fixing vulnerable_lambda scenario

This is a follow-up to my recent blog post CloudGoat – vulnerable_lambda with Pacu. In my recent exploration of cloud vulnerabilities with the help of Pacu and CloudGoat by Rhino Security Labs, we were able to demonstrate how a combination of overlooked permissions and an SQL injection vulnerability in a

FastAPI with async Celery tasks

Like all developers with too many side projects and an immense imposter syndrome, I was working on the next great feature for my side-project. Import via CSV! First I implemented a working solution with FastAPI's BackoundTasks feature. But this didn't feel right. In the documentation Celery recommended, so I go

CloudGoat - vulnerable_cognito

Deploying a secure environment in AWS is like threading a needle in the vast expanse of cloud services—a single misstep can leave you vulnerable to a security breach. This post will delve into the intricate details of deploying a vulnerable AWS Cognito scenario using CloudGoat and document every twist

flAWS Write-up

flAWS, the brainchild of Scott Piper from Summit Route, is a unique cloud security game designed to educate users on the common pitfalls and misconfigurations that can occur when employing Amazon Web Services (AWS). Unlike traditional web-based security challenges, flAWS focuses exclusively on AWS-specific issues, eschewing more commonplace vulnerabilities like

CloudGoat – vulnerable_lambda with Pacu

As I aim to sharpen my cloud security expertise, I embrace the concept of practical, hands-on experience. Rhino Security Labs provides the indispensable tools for this journey. CloudGoat will deploy intentionally vulnerable cloud environments. Yes, intentionally vulnerable! So when you use it yourself, make sure to use a dedicated AWS