This is a write-up of the “nix-build as a service” challenge from KalmarCTF 2025, a sequel to last year’s “Reproducible Pwning” challenge. To get to the solution, we will take a peek behind the curtain into how Nix derivations work internally.
In this post we will take a look at how to setup Collabora Online on a Nextcloud instance using NixOS, resulting in a compelling self-hosted alternative to Google Docs/Sheets/Slides/Drawings.
This is a quick post on how I migrated my Immich deployment from Docker to a native NixOS module, and how you can do the same.
This is a write-up of the “GoSweeper” challenge from Round 2 of openECSC 2024. This challenge gives us a glimpse of side channels on the web, which allow us to infer information which we otherwise would not have access to.
This is a write-up of the “Reproducible Pwning” challenge from KalmarCTF 2024. This challenge takes us through the inner workings of Nix and a very interesting privilege escalation that has made me change my own NixOS configuration.
A little over a year ago, due to my own interests but also some peer pressure from my friends and family, I started thinking about the possibility of studying abroad, either for the whole master’s, or only for one or two semesters. This is the story of all the twists and turns in my journey to end up studying in the MSc Cybersecurity at KTH, in Sweden.
Hello world, welcome to my little corner of the internet!
This post marks the beginning of my blogging journey.
You might be thinking: what will this blog be about?