notes on 16k.es

New OWASP Logroño event

Sat, 24 May 2025 12:52:12 +0200

On May 22nd, we held a new cybersecurity event in Logroño, attended by numerous professionals and enthusiasts from the security field.

iPad stuff: syncing with git

Sat, 07 Dec 2024 16:40:54 +0100

The iPad, particularly the iPad Mini, is such a versatile tool. It allows you to leave your laptop at home while still handling light tasks that would typically require a computer.

II Marcha del Primer Vino

Fri, 08 Nov 2024 00:00:00 +0100

II First Wine Route, organized by Bodegas Tarón. It combines several purposes: on the one hand, it pays tribute to veteran winegrowers in the area (“Tarón territory”) by offering them the first wine and besides that it is dedicated to a charitable cause (this year to the Foundation El Sueño de Vicky for the research of childhood cancer).

Navaja Negra in a minute

Sun, 27 Oct 2024 00:00:00 +0200

A quick summary of Navaja Negra 2024 (#nn12ed)

I Leaked My Secrets to Github

Tue, 22 Oct 2024 00:00:00 +0200

Sunday evening. I was writing stupid code in a cold, rainy day.

After a long day of coding, things were finally working. I was using a cloud service for… whatever. I was tired, and I wanted to push my code to github.

As usual, I created a copy of the configuration file and redacted it to remove the secrets (the precious API_KEY).

trufflehog can save your day

Using Ai to Generate Meaningful Commit Messages

Sun, 20 Oct 2024 00:00:00 +0200

I have a couple of tasks / pet-projects where a task in the background is taking care of commiting to git and pushing to github.

Needless to say, 99% of my all-life commits used to be just “fix typo” or “update readme” or “add missing semicolon”. With the commits being automatic it is even worse: now everything is “automatic commit from laptop-foobar”. Meh.

Hugo Redirect Page

Sat, 19 Oct 2024 00:00:00 +0200

How to create a redirect page in Hugo.

Tired of Overly Complicated Shell Prompts?

Sun, 13 Oct 2024 00:00:00 +0200

Tired of overly complicated shell prompts? I am :rage:

Hack the knife

Wed, 09 Oct 2024 00:00:00 +0200

Well, another Navaja Negra is over and that makes… four? five? I don’t even know.

Navaja Negra logo

By the Ebro river to Cenicero: autumn is coming

Mon, 07 Oct 2024 00:00:00 +0200

Autumn is coming, the vineyards begin to dress in ochre and La Rioja smells like mosto.

So let’s go and enjoy it, right?

Aras and Viana: gothic, neolithic and romanesque

Sun, 15 Sep 2024 00:00:00 +0200

On this occasion, the route takes us through the area around Viana, in Navarre, where we will find megalithic monuments, Romanesque hermitages and Gothic ruins.

La Vuelta pasa por La Rioja: Bonicaparra y Pradilla

Sat, 07 Sep 2024 00:00:00 +0200

On the occasion of the 19th stage of the Vuelta Ciclista a España passing through La Rioja, I went to Ezcaray to climb a mountain pass that I had missed a lot: Bonicaparra.

Ermita de Santa Maria de Rute (Ventas Blancas)

Sat, 17 Aug 2024 00:00:00 +0200

In the middle of a vineyard in Ventas Blancas, you can find the remains of a Visigothic basilica built in the 6th century.

Let’s visit it today!

Bluetooth default profile

Mon, 19 Dec 2022 19:35:17 +0100

Every time I disconnect and reconnect my Bluetooth headphones, my Ubuntu 22.04 switches the default mic from my headset to some other device.

iMovie crashes with the GoPro files

Fri, 14 Oct 2022 23:24:08 +0200

This is something that made me really angry after I bought a GoPro. It’s not that I’m very skilled or spend a lot of time editing GoPro videos, but it was practically impossible. iMovie would constantly freeze. z

Pandoc on RHEL-8

Sun, 16 Jan 2022 09:04:44 +0100

Pandoc is a Haskell library for converting from one markup format to another, and a command-line tool that uses this library. It can convert from/to multiple formats including, but not limited to, various flavors of Markdown, HTML, LaTeX and Word docx and can produce PDF output.

Configuring RHEL 8 for YubiKey

Sat, 15 Jan 2022 02:04:14 +0100

An alternative to Google Authenticator.

Red Hat Certified Engineer (EX294) Sample Exam

Tue, 28 Dec 2021 21:21:22 +0100

I think it was in late 2019 when Red Hat updated their RHCE exam, now based on RHEL 8 and the Ansible Automation Platform. The performance-based exam code is EX294 (more information here) and by passing this exam you become a Red Hat Certified Engineer.

Enumerating DNS Subdomains

Sat, 11 Dec 2021 11:26:45 +0100

Be it for CTFs, real life™ pentests, threat intel, etc. DNS subdomain enumeration is a very important task. There are many different tools and techniques for it.

Is BGP secure?

Tue, 31 Aug 2021 20:50:10 +0200

Is BGP secure?

Security RSS feeds

Thu, 28 Jan 2021 18:56:49 +0100

Some security-related RSS feeds

Mechanical keyboards and pandemic

Sat, 16 Jan 2021 00:00:00 +0100

COVID-19 pandemic has changed our lives. Death toll is over two million today. Two million deaths. Some reports say jobs lost are hundreds of millions. Hundreds of millions!! I feel lucky to keep my job and to be able to work from home, in a safe environment.

Scanning hosts with nmap (and other tools)

Sun, 03 Jan 2021 19:53:51 +0100

No matter whether you a running a CTF challenge or performing a real life pentest exercise, chances are you will need to use nmap over and over again. There are a ton of options, which ones to use?

Reverse Shell Cheat Sheet

Fri, 01 Jan 2021 19:22:08 +0100

This is a verbatim copy of http://pentestmonkey.net/cheat-sheet/shells/reverse-shell-cheat-sheet because it is tagged as unwanted software by Google Safe Browsing and just in case…

Cryptomator

Sat, 12 Dec 2020 17:05:02 +0100

The cloud is a convenient place to store your files. But convenience is not always the best for your privacy. Cryptomator comes to the rescue - it was designed to solve privacy issues when saving your files to cloud storage.

Cloning virtual machines in VMware Fusion

Mon, 07 Dec 2020 19:18:11 +0100

How to clone a virtual machine in VMware Fusion for Mac Personal Edition.

RHEL8 root password recovery

Mon, 07 Dec 2020 00:12:54 +0100

When studying to apply for a Redhat certification I tend to go over root password recovery again. Just in case :smile:

Hackthebox: devel

Sun, 06 Dec 2020 22:58:29 +0100

Walkthrough a new easy Windows box.

Hackthebox: Legacy

Sun, 06 Dec 2020 20:56:01 +0100

HTB legacy box writeup. It’s a very easy machine, just need to find a well known vulnerability.

Caffeinate

Fri, 04 Dec 2020 00:00:00 +0100

This week I’ve been trying to watch an online conference (with my left eye) while working (with the right one).

I was using an old MacBook Air with the new macOS Big Sur to watch the conference. As usual, it is configured to lock the screen after a short time of inactivity.