UDPot is a littel script to run an honeypot which acts as a real DNS server, sending out DNS replies for the first bunch of requests, and after it work as a sinkhole.

In the last days I refreshed the code, updated the requirements and more spring cleaning.

Now a docker image is available on DockerHub, you can run it with:

$ docker run --name udpot -p 5053:5053/udp -p 5053:5053/tcp -d jekil/udpot

It will run UDPot on port 5053 UDP and TCP, if you want to use it on another port you can bind it with …

Today Italian news were surrounded by the story of brother and sister arrested in Italy for spying on top public officials, institutions and high profile VIPs.

The EyePyramid story has been widely reported and probably it is going to monopolise Italian media for the next week. So I do not want to write about it.

The only official information available (right now) are in the subpoena / arrest warrant (sorry, in Italian). It is filled of operational details about how the bad guys were running their business.

Technically speaking, they wrote a VB.NET malware with RAT / spyware features. They infected …

Some time ago I created an home dashboard, using a Raspberry Pi, to have all my favourite tools (i.e. Zabbix, Munin) on a wall screen in my room. Now I want to write down and share with everyone how I put it together.

The whole idea of this is to have the Raspberry Pi hidden behind the screen, so trailing Ethernet cables isn’t ideal. Luckily the Pi supports a range of Wifi adapters, also latest Pi has integrated Wifi.

TL;DR: What happened today? Thanks to the worst customer service provided by Lufthansa I am going to explain you why I missed a day in Vegas and why, in my over 15 years experience, you should stop flying Lufthansa.

Today, I was heading to Las Vegas, to chill out at BlackHat and Defcon, via Frankfurt and Philadelphia. I was flying  Lufthansa, because in long flights I prefer to spend more and be safe; with my 2 dogs in a checked-in box. Due to many Lufthansa fails in logistics and customer service I miss my flight and I have been …

This how to will guide you through the setup of an Image Forensics lab, using Ghiro, a free and open source image forensics tool.

Ghiro comes also with a virtual appliance (it is a copy of Ubuntu Linux with all you need already installed, you can run on your host) to help people get a running Ghiro in few steps.