Introducing RxCloud CyberLab

[RoxasDev]

RxCloud CyberLab

Website RxCloud CyberLab

Spoiler: Preview

The first 100% free & open sandbox for malware researchers !

Tired of the limitations of Hybrid Analysis, Any.Run, or other closed platforms?
RxCloud CyberLab is here to break the rules.

Built from scratch by a single developer in Alsace , RxCloud CyberLab offers:

• Dedicated Windows 10 LTSC VMs (ReverseLab & PentestLab)
• Full isolation via pfSense firewall (traffic logged & monitored)
• Outbound traffic routed through an encrypted VPN in Luxembourg (dedicated IPs never exposed, malware traffic fully logged)
• Instant access through Guacamole (HTML5 RDP, no software required)
• Time-limited slots (30 min per user, fair use guaranteed)
• Automatic monitoring of CPU, RAM, network & storage
• Final PDF report with logs, behavior, and IoCs
• Access granted only to verified malware hunters, AV testers, and security researchers

---

​

Available Labs
• ReverseLab → Pre-loaded with tools for reverse engineering & malware tracking
• PentestLab → Clean VM where you can install the AV of your choice and put it to the test

Current Capacity
For now, the dedicated server has a small configuration:

• Maximum 2 VMs running simultaneously → 1 ReverseLab + 1 PentestLab
• If the project gains traction, a larger server will be deployed to support more parallel sessions

Alpha Version Disclaimer
RxCloud CyberLab is currently in Alpha.
Bugs, glitches, or temporary downtime may occur.
Feedback and bug reports are highly encouraged to help improve the platform.

---

​

How to apply?

1. Fill out the request form with:
   • A valid email address
   • Proof of your background (GitHub profile, MalwareTips, blog, or research samples)
2. Each request is manually reviewed.
3. If approved, you’ll receive your credentials by email.

---

​

Philosophy

Unlike other services, RxCloud CyberLab will always stay free & open.
No marketing, no hidden agenda – just a tool for the community, by the community.

 

[[correlate]]

What about your protection program? Has it been abandoned, or are you still working on it?

 

[RoxasDev]

What about your protection program? Has it been abandoned, or are you still working on it?

Good question! XyWall hasn’t been abandoned — it was acquired and integrated as a private in-house anti-malware solution.
It’s still alive, but no longer available to the public. That’s exactly what gave me the freedom to focus on building RxCloud CyberLab for the community.

 

[Shadowra]

I was able to test it in advance and I support the project
The VMs are turnkey, ready to go (I reverse engineered AgentTesla for testing. @RoxasDev provides all the tools you need to reverse engineer malware properly).

I just experienced some latency during RDP (I'm on 8Gbps fiber optic, so I think it must be coming from the server, given that it's an Alpha version).
I haven't tested the Antivirus part yet, but I'll do so when I can

 

[stonjean633]

Looks promising.
No file limit size as well?

 

[RoxasDev]

I was able to test it in advance and I support the project
The VMs are turnkey, ready to go (I reverse engineered AgentTesla for testing. @RoxasDev provides all the tools you need to reverse engineer malware properly).

I just experienced some latency during RDP (I'm on 8Gbps fiber optic, so I think it must be coming from the server, given that it's an Alpha version).
I haven't tested the Antivirus part yet, but I'll do so when I can

Thanks a lot for your feedback and support
Yes, the platform is still in Alpha, so some latency can happen depending on the server load and resources.
Currently, the dedicated server is quite small (only 1 ReverseLab + 1 PentestLab running simultaneously). If the project grows, a bigger infrastructure will definitely be deployed to improve performance.

Really glad you were able to test with AgentTesla and that the tools met your expectations Can’t wait to hear your feedback on the Antivirus side when you get the chance!

 

[RoxasDev]

Looks promising.
No file limit size as well?

At the moment, there’s a limit of 200 MB per ZIP upload.
This is to keep things stable in Alpha on the current server.
If the project grows and we move to a bigger infrastructure, the limit will be increased.

 

[Studynxx]

If it's free, you are the product, the saying goes... So how exactly do you keep up with the costs of operations here? Since it's free

 

[RoxasDev]

If it's free, you are the product, the saying goes... So how exactly do you keep up with the costs of operations here? Since it's free

Good question and I understand the concern.
RxCloud CyberLab is 100% free, and there is no hidden agenda — no ads, no data selling, nothing like that.
The costs are currently covered personally and kept low thanks to a small dedicated server (limited to 1 ReverseLab + 1 PentestLab simultaneously).

This is not a commercial project — it’s a passion project. If it grows, I’ll consider community support (donations or sponsorships), but user data will never be the product.

 

[lokamoka820]

If it's free, you are the product, the saying goes... So how exactly do you keep up with the costs of operations here? Since it's free

Not always. Sometimes, software can be covered by donations. Linux Mint, for example, earns about $20,000 per month from donations.

 

[Khushal]

RxCloud CyberLab

Website RxCloud CyberLab

Spoiler: Preview

The first 100% free & open sandbox for malware researchers !

Tired of the limitations of Hybrid Analysis, Any.Run, or other closed platforms?
RxCloud CyberLab is here to break the rules.

Built from scratch by a single developer in Alsace , RxCloud CyberLab offers:

• Dedicated Windows 10 LTSC VMs (ReverseLab & PentestLab)
• Full isolation via pfSense firewall (traffic logged & monitored)
• Outbound traffic routed through an encrypted VPN in Luxembourg (dedicated IPs never exposed, malware traffic fully logged)
• Instant access through Guacamole (HTML5 RDP, no software required)
• Time-limited slots (30 min per user, fair use guaranteed)
• Automatic monitoring of CPU, RAM, network & storage
• Final PDF report with logs, behavior, and IoCs
• Access granted only to verified malware hunters, AV testers, and security researchers

​

---

Available Labs
• ReverseLab → Pre-loaded with tools for reverse engineering & malware tracking
• PentestLab → Clean VM where you can install the AV of your choice and put it to the test

Current Capacity
For now, the dedicated server has a small configuration:

• Maximum 2 VMs running simultaneously → 1 ReverseLab + 1 PentestLab
• If the project gains traction, a larger server will be deployed to support more parallel sessions

Alpha Version Disclaimer
RxCloud CyberLab is currently in Alpha.
Bugs, glitches, or temporary downtime may occur.
Feedback and bug reports are highly encouraged to help improve the platform.

​

---

How to apply?

1. Fill out the request form with:
   • A valid email address
   • Proof of your background (GitHub profile, MalwareTips, blog, or research samples)
2. Each request is manually reviewed.
3. If approved, you’ll receive your credentials by email.

​

---

Philosophy

Unlike other services, RxCloud CyberLab will always stay free & open.
No marketing, no hidden agenda – just a tool for the community, by the community.

I will give it a shot.
Maybe i will use it for making my own antivirus tests starting in Q1 2026. Stay tuned for that. I promise they will be the most rational, indepth and unbiased tests u will find on the planet.

 

[RoxasDev]

RxCloud – CyberLab Update Log

Date: 2025-09-11
Maintenance Duration: 1h30

---

Changes​

CoreLab Controller

• Implemented claim timeout (5 minutes) to prevent AFK sessions.
• Improved artifact collection → bundle.zip compression is now 2x faster.

VM Reverse Lab

• Rebuilt the GOLD image (fixed a GPO issue).
• Fixed bug in RxLab agent where PDF reports weren’t submitted and uploaded samples were not correctly deposited in the dashboard.

VM Pentest AV

• Rebuilt the GOLD image (fixed a GPO issue).
• Fixed bug in RxLab agent where PDF reports weren’t submitted and uploaded samples were not correctly deposited in the dashboard.

---

Notes​

• Slots are now available again.
• Next step: Discord/Webhook notifications for real-time alerts.

 

[RoxasDev]

RxCloud – CyberLab Update Log

Date: 2025-09-11
Maintenance Duration: 1h00

---

Changes

CoreLab Controller

• Improved slot management for better stability and fairness.

VM Reverse Lab

• Allocated +1 CPU core for smoother performance.
• Enabled 3D acceleration.
• Updated Guest Additions for improved graphics acceleration.

VM Pentest AV

• Allocated +1 CPU core for smoother performance.
• Enabled 3D acceleration.
• Updated Guest Additions for improved graphics acceleration.

---

Notes

• Slots are now available again.
• Next step: Discord/Webhook notifications for real-time alerts.

 

[RoxasDev]

RxCloud – CyberLab Update Log

Date: 2025-09-12
Maintenance Duration: 3h00

---

Changes

CoreLab Controller

• Fixed a minor bug in slot handling.

RDP Guacamole

• Optimized both PentestLab and ReverseLab VMs for faster performance.

• Enabled compression for better bandwidth efficiency.
• Activated bitmap refresh (only changed parts of the screen are redrawn, instead of resending the full image).

---

Notes

• Sessions should now feel noticeably faster and more responsive.
• Further optimizations are planned for upcoming updates.

 

[RoxasDev]

RxCloud CyberLab – Sneak Peek

The self-registration system is now live and fully coded.
Users can create an account, receive a verification email, and validate access through secure tokens.

For now, account creation is locked during the Alpha stage (access remains request-only).
But once we move to Beta, registration will officially open to the community.

Spoiler: Preview

 

[RoxasDev]

RxCloud – CyberLab Update Log

Date: 2025-09-15
Maintenance Duration: 3h00

Changes

RxLab Reports

• Enhanced PDF telemetry reports for better readability.
• Data is now grouped by category: Network Connections, DNS Queries, DLL Image Loads, Process Starts, and Process Terminations.

VM Reverse Lab

• Added Microsoft Office 2024 (full suite) to enable testing of payloads with macros or Office-related exploits.

VM Pentest AV

• Added Microsoft Office 2024 (full suite) to enable testing of payloads with macros or Office-related exploits.

Notes

• Slots are now available again.
• Next step (working in progress) : Discord/Webhook notifications for real-time alerts.

 

[RoxasDev]

RxCloud – CyberLab Update Log

Date: 2025-09-18
Maintenance Duration: 4h00

---

Changes​

RxLab Reports​

• Reworked PDF architecture for cleaner layout and faster rendering.
• Improved readability with clear, well-separated sections (Header, Meta, Summary, Processes, Indicators).
• Added Antivirus block (PentestLab only): shows installed AV, engine version, and definition status.

RxLab Agent​

• Integrated AV Meta watcher to capture antivirus metadata (vendor, engine version, signatures status) and expose it in meta.json / telemetry.

VM Reverse Lab​

• System optimization + full Windows Update pass.
• Refreshed core Reverse tools stack.
• Microsoft telemetry disabled to reduce noise and improve performance.

VM Pentest Lab​

• System optimization + full Windows Update pass.
• Microsoft telemetry disabled for better stability and lower overhead.

---

Notes​

• Slots are now available again.
• Next steps (work in progress):
  • Real-time Discord/Webhook notifications.
  • AV Vendor Event Watcher in PentestLab (collect detections count, detected files, actions) for richer telemetry.

 

[RoxasDev]

RxCloud – CyberLab Update Log

Date: 2025-09-24
Maintenance Duration: 2h30

---

Changes​

RxLab Reports

• Improved PDF reports with enhanced telemetry.
• Better categorization for clearer readability and consistency.

RxLab Agent

• Enhanced capture of antivirus metadata in PentestLab (improved detection of installed AV).
• Improved capture of reverse engineering tools metadata in ReverseLab.

VM ReverseLab

• Updated reverse tools stack.
• Applied latest Microsoft updates.
• Installed latest Microsoft Visual C++ Runtimes.
• New: Added RxLab Notify → in-VM notification when a slot is about to expire.

VM PentestLab

• Applied latest Microsoft updates.
• Installed latest Microsoft Visual C++ Runtimes.
• New: Added RxLab Notify → in-VM notification when a slot is about to expire.

---

Notes

• Slots are now available again.

Next steps (work in progress):

• Real-time Discord/Webhook notifications.
• AV Vendor Event Watcher in PentestLab (collect detections count, detected files, actions) for richer telemetry.

 

[RoxasDev]

RxCloud – CyberLab Update Log

Date: 2025-09-30
Maintenance Duration: 3h00

---

Changes

RxLab Reports
Minor bug fix.

RxLab Agent
Fixed multiple bugs, including incorrect detection of the installed AV (fallback always returned Microsoft Defender).
Improved telemetry.
Fixed a bug capturing NT System processes in case of elevation.

RxLab Notify
Fixed a minor bug where notifications were not displayed correctly.

VM ReverseLab
Applied third-party updates.
Updated reverse engineering tools stack.

VM PentestLab
Applied third-party updates.

---

Notes
Slots are now available again.
Next steps (work in progress):

• Real-time Discord/Webhook notifications.
• AV Vendor Event Watcher in PentestLab (collect detections count, detected files, actions) for richer telemetry.
• New upcoming feature: VM macOS integration (currently under development).

 

[cartaphilus]

RxCloud CyberLab

Website RxCloud CyberLab

Spoiler: Preview

The first 100% free & open sandbox for malware researchers !

Tired of the limitations of Hybrid Analysis, Any.Run, or other closed platforms?
RxCloud CyberLab is here to break the rules.

Built from scratch by a single developer in Alsace , RxCloud CyberLab offers:

• Dedicated Windows 10 LTSC VMs (ReverseLab & PentestLab)
• Full isolation via pfSense firewall (traffic logged & monitored)
• Outbound traffic routed through an encrypted VPN in Luxembourg (dedicated IPs never exposed, malware traffic fully logged)
• Instant access through Guacamole (HTML5 RDP, no software required)
• Time-limited slots (30 min per user, fair use guaranteed)
• Automatic monitoring of CPU, RAM, network & storage
• Final PDF report with logs, behavior, and IoCs
• Access granted only to verified malware hunters, AV testers, and security researchers

​

---

Available Labs
• ReverseLab → Pre-loaded with tools for reverse engineering & malware tracking
• PentestLab → Clean VM where you can install the AV of your choice and put it to the test

Current Capacity
For now, the dedicated server has a small configuration:

• Maximum 2 VMs running simultaneously → 1 ReverseLab + 1 PentestLab
• If the project gains traction, a larger server will be deployed to support more parallel sessions

Alpha Version Disclaimer
RxCloud CyberLab is currently in Alpha.
Bugs, glitches, or temporary downtime may occur.
Feedback and bug reports are highly encouraged to help improve the platform.

​

---

How to apply?

1. Fill out the request form with:
   • A valid email address
   • Proof of your background (GitHub profile, MalwareTips, blog, or research samples)
2. Each request is manually reviewed.
3. If approved, you’ll receive your credentials by email.

​

---

Philosophy

Unlike other services, RxCloud CyberLab will always stay free & open.
No marketing, no hidden agenda – just a tool for the community, by the community.

Looks perfect!!!! I will sign up for it once I am on a network that will allow me to visit your site.