New Update Introducing RxCloud CyberLab

🧾 RxCloud CyberLab – Maintenance & Security Improvements

📅 Date: 2026-06-10
🛠 Maintenance duration: 1h30



🛡️ Improvements

  • Enhanced the reliability and resilience of several account-related workflows
  • Improved internal validation mechanisms across multiple user actions
  • Applied additional safeguards to reduce abuse scenarios and strengthen platform stability
  • Refined the handling of certain user-facing notifications for a more consistent experience
  • Reduced unnecessary exposure of technical telemetry details while preserving Dashboard functionality
  • Performed various security hardening improvements and internal optimizations
  • Implemented minor backend refinements to improve maintainability and long-term robustness



📝 Notes

  • No user action is required
  • These improvements are transparent and do not impact normal usage of the platform
  • This maintenance cycle focused primarily on resilience, stability and proactive security hardening
 
Just a small preview of what is coming next for RxCloud CyberLab. 👀📱

kW0UWEM.jpeg
AAhkK9D.jpeg
3KxBcYP.jpeg
eP8Iova.jpeg
S2QnbgD.jpeg
9F7M62P.jpeg
BjJnwTP.jpeg

The official Android companion app is currently in development.

The objective is not to replace the web dashboard, but to bring the CyberLab experience to mobile devices while preserving the same identity and functionality.

Current and planned features include:

• Request VM slots directly from your phone.
• Join active lab sessions directly from the Android app.
• Real-time notifications when a VM is ready.
• Alerts when a session is about to expire.
• Session status monitoring and quick actions.
• Access to private reports and RxCloud Atlas.
• Profile and badge management.
• Sample upload support.
• Support for existing Windows and Linux labs.
• Designed with the upcoming Android-based lab environments in mind.

The application will require Android 8.0 (Oreo) or newer.

One of the major goals of this companion app is to provide the best possible experience for the future Android lab environments. Users will be able to manage and interact with CyberLab directly from their pocket, while continuing to access the existing Windows and Linux labs.

The app is still a work in progress, but development is progressing very well and the first internal builds are already functional.

More previews and updates will follow as development continues.

— RoxasDev
 
RxCloud CyberLab – Upcoming Feature

Another feature is about to land on RxCloud CyberLab within the next few minutes... 👀

🎥 VM Session Replay Recording

Researchers will now be able to optionally record their analysis sessions directly from the browser-based lab environment.

Once a session ends, RxCloud CyberLab will automatically:

• Capture the Guacamole session recording.
• Encode it into a downloadable video replay.
• Securely associate it with the correct user and session.
• Make it available through the Dashboard.
• Automatically remove it after the retention period.

This means you'll be able to revisit your entire analysis workflow, review the steps you performed, document your findings, or use recordings for demonstrations and training purposes.

As always, this feature remains completely optional and is designed with security and privacy in mind.

More details and screenshots coming soon.

— RoxasDev
 
🧾 RxCloud CyberLab – Update Changelog

📅 Date: 2026-06-13
🛠 Maintenance duration: 3h30



⚙️ CoreLab Controller

  • Added support for VM recording through Guacamole
  • Improved overall stability
  • Added backend technical logs for video encoding failures
  • Implemented automatic cleanup of expired recordings
  • Allocated additional CPU resources for Guacamole raw recording to M4V encoding
  • Added a dedicated secure container environment for video encoding operations



🖥️ RxCloud Dashboard

Version: 0.0.6.3_Stable

e09mdOh.png

jO0USjS.png

  • Added the new Record VM option when requesting a lab session
  • Users can now record VM sessions and retrieve video replays afterward
  • Added a new VM Record modal to browse available recordings
  • Added a Download action to retrieve completed replays
  • Added a Delete action with confirmation to permanently remove a replay
  • Replays now display:
    • Recording status
    • File size
    • Creation date
    • Expiration date
  • The Record VM option is only available before launching a slot
  • Improved header integration to better accommodate the VM Record entry point



📝 Notes

  • Replay videos are private and isolated per user within dedicated storage containers
  • Video recordings are retained for a maximum of 7 days
  • Expired recordings are automatically removed by the backend
 
Last edited:
🧾 RxCloud CyberLab – Maintenance & Security Improvements

📅 Date: 2026-06-15
🛠 Maintenance duration: 30 minutes



🛡️ Infrastructure Maintenance & Security

  • Upgraded Apache HTTP Server to the latest version (2.4.68) on both the Master and Node2 infrastructures
  • Applied the latest PHP updates on both the Master and Node2 infrastructures
  • Performed validation and regression testing across the upgraded infrastructure
  • Verified compatibility of existing services and workflows after migration
  • No regressions were identified during post-upgrade testing



📝 Notes

  • No user action is required
  • These updates are transparent and do not impact normal platform usage
  • This maintenance cycle focused on proactive security patching and long-term platform stability
  • Infrastructure validation completed successfully: Status: OK



🔗 Reference Changelogs

 
📢 RxCloud CyberLab - Infrastructure Upgrade

A small update for everyone following the project!

I have officially ordered a dedicated Node3, which will be focused entirely on the upcoming AndroidLab environment. 📱☁️

🇫🇷 Node3 will be hosted in Gravelines, France, at OVHcloud (as always 😄), expanding RxCloud CyberLab's infrastructure while keeping this new Android-focused environment located in France.

Node3 specifications:
• Intel Xeon-D 1520 (4C / 8T)
• 32 GB DDR4 RAM
• 480 GB SSD RAID

The goal is to provide isolated Android environments alongside the existing Windows and Linux labs, allowing users to safely analyze Android applications and perform mobile-focused investigations directly from their browser.

With Node3, RxCloud CyberLab continues its evolution into a true multi-platform cybersecurity lab, now covering:

🖥️ Windows Labs
🐧 Linux Labs
📱 Android Labs (coming soon)

A huge thank you to everyone for your feedback, suggestions, bug reports, and support throughout this journey. It's incredible to see how what started as a small personal project continues to grow step by step.

More updates will follow as AndroidLab development progresses.

And yes... OVHcloud is still hosting the future of RxCloud CyberLab. 😉

— RoxasDev
 
Good news! 🎉

The Android Labs tests have been successful. After a lot of trial and error, I finally found a stable configuration for BlissOS running under VirtualBox with Guacamole integration.

Android sessions can now be accessed directly from the browser, just like the existing Windows and Linux labs.

The next step is to wire everything into the platform and integrate it with the CoreLab Controller so Android Labs become part of the standard RxCloud CyberLab experience.

It's been quite a journey, but seeing Android running inside the browser through the distributed infrastructure was definitely worth it. 😄

More updates soon!
 
🧾 RxCloud CyberLab – Update Changelog

📅 Date: 2026-06-17
🛠 Maintenance duration: 4h30

HV2K5K7.png



⚙️ CoreLab Controller

  • Updated infrastructure configuration to support the new Node3 dedicated to Android 12 virtual machines
  • Improved overall platform stability
  • Added VM Recording support for Android 12 lab environments
  • Extended orchestration support for Android-based lab sessions



📱 RxLab Agent Android (NEW)

  • Introduced the new Android telemetry agent for RxCloud CyberLab
  • Monitors installed applications, permissions, package activity and device behavior
  • Detects potentially suspicious permissions and privilege usage
  • Collects APK metadata including:
    • Package information
    • Publisher information
    • Digital signature status
    • Known/unknown APK reputation indicators
  • Monitors network activity and potential command-and-control (C2) communications
  • Supports sample delivery and analyst notes similarly to Windows and Linux agents
  • Includes local API fallback and hypervisor fallback mechanisms for improved reliability



📄 RxLab Reports

  • Added support for Android telemetry processing
  • PDF report generation now supports Android sessions
  • JSON report generation now supports Android sessions
  • Android-specific telemetry, permissions, packages and artifacts are now included in reports



🌐 RxCloud Atlas

  • Added support for Android telemetry compilation
  • Android sessions are now integrated into Atlas analysis workflows
  • Android behavioral artifacts can now be visualized within Atlas



🔗 Apache Guacamole

  • Applied the latest Guacamole package updates
  • Applied the latest Debian security updates
  • Enabled virtual keyboard support for:
    • Windows virtual machines
    • Linux virtual machines
    • Android virtual machines
  • Improved support for special key combinations that may not be available on some devices
  • Added touch-friendly support for Android virtual machines
  • Prepared Guacamole for future integration with the RxCloud Android application



🛡️ PfSense Firewall Cluster

  • Added Node3 to the WireGuard-connected infrastructure
  • Integrated Node3 into the firewall cluster architecture
  • Added dedicated hardened filtering rules for Android lab environments



📝 Notes

  • The RxCloud CyberLab Android application is currently under development and testing
  • Initial tests have been successful
  • Following validation, the application will be submitted to Google for Play Store review and publication

📱 Planned Mobile Features

  • Reserve lab sessions directly from a smartphone
  • Receive notifications when a slot becomes available
  • Receive notifications before slot expiration
  • View PDF reports
  • View JSON reports
  • Control Android virtual machines using touch gestures
  • Access Atlas Mobile
  • View My Intelligence
  • View My Behavior Map optimized for touch devices
  • Manage sessions while away from a desktop workstation



🎉 Community Milestone

  • A huge thank you to the entire community for the feedback, testing and support
  • RxCloud CyberLab continues to grow and evolve
  • The platform now provides isolated Windows, Linux and Android virtual machines for malware analysis, research, reverse engineering and pentesting
  • RxCloud Atlas has now compiled over 524 telemetry reports
 
  • Like
Reactions: harlan4096
🧾 RxCloud CyberLab – Update Changelog

📅 Date: 2026-06-18
🛠 Maintenance duration: 30 minutes



⚙️ CoreLab Controller

  • Fixed several minor bugs across the orchestration pipeline
  • General performance optimizations and stability improvements
  • Improved video encoding quality for recorded VM sessions
  • Replay videos are now encoded at up to 1920×1080 (1080p) with an improved bitrate of 6 Mbps for better visual quality



🔗 Apache Guacamole

  • Optimized video streaming performance for recorded sessions
  • Enabled automatic recording fragment merging when the Record VM option is enabled
  • If a user disconnects and reconnects during a recorded session, replay generation now produces a single continuous video file
  • Improved recording continuity and replay consistency across long-running sessions



📝 Notes

  • This update focuses on improving the VM recording experience and replay quality
  • Replay videos now provide a smoother and more seamless viewing experience
  • Recording reliability continues to be improved ahead of future platform scaling efforts
 
  • Like
Reactions: harlan4096
🧾 RxCloud CyberLab – Update Changelog

📅 Date: 2026-06-20
🛠 Maintenance duration: 2h30



🔗‍️ Apache Guacamole

  • Adjusted virtual keyboard behavior for Windows and Linux labs
  • Resolved an issue where the on-screen keyboard could occupy too much screen space, making VM interaction difficult on some devices
  • Improved usability and workspace visibility when using the virtual keyboard
  • Allocated additional memory resources for VM recording and video encoding operations
  • Improved overall recording stability during long-running sessions



🛡️ PfSense Firewall

  • Improved WireGuard tunnel stability across the infrastructure
  • Optimized firewall rules for enhanced Android VM hardening
  • Refined network filtering policies for Android lab environments



⚙️ RxLab Agent Windows

  • Fixed a rare edge case where telemetry was not successfully returned to the Master node
  • Improved overall agent performance and responsiveness
  • Enhanced reliability of telemetry collection and submission



🧬 Windows ReverseLab VMs

  • Updated the reverse engineering software stack
  • Updated third-party software packages



🧪 Windows PentestLab VMs

  • Updated third-party software packages



👾 Kali Linux VMs

  • Applied the latest package updates
  • Updated penetration testing tools



🐧 Reverse Linux (REMnux) VMs

  • Applied the latest package updates
  • Updated reverse engineering tools



🐧 Pentest Linux (Ubuntu) VM

  • Applied the latest package updates



📝 Notes

  • Android virtual machines remain unchanged in this maintenance cycle
  • This update focused primarily on platform stability, VM usability, telemetry reliability and infrastructure hardening
 
  • Like
Reactions: harlan4096

You may also like...