kryssar.se
Menu

Appreciation

Technical Acknowledgements & Community Appreciation

This homelab control plane, detection suite, and portfolio are built upon the shoulders of giants. The success of this purple-team environment relies entirely on the hard work of numerous open-source developers, security researchers, and projects.

I want to extend my sincere gratitude to the maintainers and contributors of the following software suites, frameworks, and tools used throughout this journey.

🏗️ Lab Infrastructure & Target Scenarios

  • SAGA Active Directory lab (SAGA) by Orange Cyberdefense
    The brilliant multi-domain Active Directory vulnerable playground that serves as the absolute baseline for all attack walkthroughs in this lab.
  • DVWA (Damn Vulnerable Web Application) by digininja
    The classic and highly reliable web application security playground utilized for validating web-based attacks and agent-less telemetry loops.

🛡️ Blue Team, SIEM & Network Detection (NDR)

  • Malcolm by Idaho National Laboratory
    An outstanding, full-featured network security monitoring and packet analysis stack. Malcolm's integration of Zeek, Suricata, and OpenSearch forms the core of our traffic analysis and threat hunting.
  • Velociraptor by Velocidex
    The premiere endpoint monitoring and digital forensics framework. Used extensively in this lab for real-time artifact collection, Sysmon operational log hunting, and automated forensics pipelines.
  • Wazuh SIEM
    A robust and comprehensive security monitoring manager used for host-level telemetry, integrity checks, and direct Active Directory threat alerts.

⚙️ Orchestration, Secrets & Terminal Hygiene

  • n8n by n8n-io
    The highly flexible, fair-code workflow automation platform powering our autonomous overnight loops, security scans, and reflection pipelines.
  • n8n-mcp by czlonkowski
    An exceptional MCP server that gives AI agents deep, structured knowledge of n8n — 1,800+ node schemas, 2,300+ importable workflow templates, live workflow validation, and diff-based partial updates. Invaluable for AI-assisted workflow engineering with zero trial-and-error node discovery.
  • OpenBao
    The community-maintained open-source secrets management vault (forked from HashiCorp Vault), keeping all lab administrator and API credentials safe and centralized.
  • Tmux Resurrect by tmux-plugins
    The essential tmux session layout saver, preserving named panes, layout structures, and working directories across power cycles and kernel updates.

🗡️ Offensive Security & Execution Frameworks

  • Impacket by Fortra/SecureAuth
    The foundational Python library for working with low-level network protocols and orchestrating Kerberos, SMB, and Active Directory attacks.
  • Certipy by Oliver Lyak
    The definitive tool suite for enumerating and exploiting Active Directory Certificate Services (ADCS) trust misconfigurations (ESC1-ESC13).
  • NetExec (NXC)
    The outstanding, multi-protocol credential spray, network assessment, and active-privilege validation framework.
  • Sliver C2 by Bishop Fox
    The advanced, cross-platform implant and Command & Control framework utilized for post-exploitation simulation.
  • BloodyAD by CravateRouge
    An excellent framework for Active Directory privilege escalation and object control.

🧠 Local AI & Inference Infrastructure

  • LiteLLM Gateway by BerriAI
    The excellent API translation proxy used to unify local and cloud-based models under a single load-balanced OpenAI-compliant framework.
  • Ollama
    The highly optimized and robust CLI and daemon hosting framework for executing local LLMs (Llama, Qwen, Mistral) at maximum speeds.
  • LM Studio
    A developer-friendly local LLM catalog and desktop model server endpoint provider used for offline task offloading and prose translation.

Static Generation & Site Styling

  • Astro The static-first site framework powering the public security portfolio with pre-rendered pages and minimal client-side surface.
  • Custom CGE design system A restrained tactical-engineering visual language built for fast public pages, clear service positioning, and publication-safe research notes.

Thank you to all authors, maintainers, and community contributors who make high-fidelity security research and education possible.