bash  ⋯  zsh  ⋯  fish  ⋯  nushell

GTFOBins is a curated list of Unix-like executables that can be used to bypass local security restrictions in misconfigured systems.

gtfobins.org

Château des Montgommery
Ducey (@home) - Normandy - France 

wikipedia

Mistral AI subway NYC

Write programs that do one thing and do it well. Unix
cat
grep
sed
awk
ls
cd
find

Year 2003
23 years ago

Caveman

A Claude Code skill that makes agent talk like caveman — cutting ~75% of output tokens while keeping full technical accuracy

IncusOS

Designed to provide an extremely secure environment in which to run Incus and related software.
It requires a lot of modern system features and will not function properly on older unsupported systems.

ISO creator

microterm.dev

Free Alpine Linux VM in your browser

Setting up Incus with ZFS on NixOS

Rocky Hetherington
28 Jan 2025 — 6 min read

Personal infrastructure setup 2026

My 2026 infrastructure strategy is simple :

 ☄  Incus for efficient
       lightweight service isolation

@Morten Linderud

Obscura

The open-source headless browser for AI agents and web scraping. Lightweight, stealthy, and built in Rust.

github.com/h4ckf0r0day/obscura

Unlike stateless sandboxes,
OpenComputer offers persistent VMs.

Your data survives across sessions, eliminating the need for constant re-installs. Enjoy a continuous workflow with the ability to scale resources instantly.

opencomputer.dev

Firecracker consists of 83k lines of Rust, boots in 125ms, and powers AWS Lambda.

QEMU is a 1.4m-line C beast capable of emulating anything from a modern processor down to a Sound Blaster 16.

While most agent sandboxes opted for Firecracker, we chose QEMU. As agent capabilities become 100x more ambitious, simple function runtimes simply won't suffice. 

We’re building the actual computers they need.

@utpalnadiger

My Stack for 2026 - Dec 22, 2025 
joshblais

Go + Datastar + SQLite + NixOS

I am building a cloud - 2026-04-22

Today’s cloud is broken: rigid abstractions, overpriced networking, and bottlenecked SSDs. I’m building exe.dev to fix it.

A cloud designed for the era of AI agents where you control your resources, not the vendor. 

Back to basics, back to computing.

CubeSandbox

Type : CLI
Environment : Local/Cloud
Isolation workspace : No
Isolation runtime : RustVMM + KVM 

Cube Sandbox is a high-performance, out-of-the-box secure sandbox service built on RustVMM and KVM. 

creating a hardware-isolated sandbox environment with full service capabilities in under 60ms, while maintaining less than 5MB memory overhead.