// LATEST

Cybersecurity

CloudGoat: Learning Cloud Penetration Testing by Breaking Things on Purpose

By Rob Ragan ★ 3.6k Unknown May 13, 2026
Developer Tools

Pathbrute: Exploit-Aware Directory Enumeration for Penetration Testing

By Rob Ragan ★ 456 Unknown May 13, 2026
Developer Tools

Mining Robots.txt for Security Intelligence: Inside RobotsDisallowed

By Rob Ragan ★ 1.5k Unknown May 13, 2026
Developer Tools

Hunting Java Deserialization Exploits with Graph Traversal: Inside Inspector-Gadget

By Rob Ragan ★ 109 Unknown May 13, 2026
Cybersecurity

WhatWeb: Ruby-Powered Web Fingerprinting with 1800+ Plugins for Security Reconnaissance

By Rob Ragan ★ 6.6k Unknown May 13, 2026
Developer Tools

sshuttle: The Transparent Proxy That Turns SSH Into a VPN Without the VPN Overhead

By Rob Ragan ★ 13.3k Unknown May 13, 2026
Data & Knowledge

Commonspeak2: Mining Google BigQuery to Generate Wordlists from Real Internet Traffic

By Rob Ragan ★ 775 Unknown May 13, 2026
Developer Tools

Anatomy of S2-057: Understanding Struts2's Namespace Vulnerability Through Live Exploitation

By Rob Ragan ★ 310 Unknown May 13, 2026
AI Dev Tools

Photon: The Multi-Threaded OSINT Crawler That Weaponizes Web Archives

By Rob Ragan ★ 12.9k Unknown May 13, 2026
Automation

Tracy: Browser-Based Taint Tracking That Bypasses the Proxy Tax

By Rob Ragan ★ 557 Unknown May 13, 2026
Cybersecurity

RecurseBuster: Why HEAD-First Requests Make Recursive Content Discovery Faster

By Rob Ragan ★ 250 Unknown May 13, 2026
Developer Tools

git-secrets: Why Client-Side Git Hooks Still Matter for Credential Protection

By Rob Ragan ★ 13.3k Unknown May 13, 2026
AI Dev Tools

unfurl: The Bug Bounty Hunter's Secret Weapon for URL Parsing

By Rob Ragan ★ 1.3k Unknown May 13, 2026
Cybersecurity

Mining Bug Bounty Scopes at Scale: Inside bounty-targets-data's Automated Intelligence Pipeline

By Rob Ragan ★ 3.7k Unknown May 13, 2026
AI Dev Tools

CeleryStalk: Building a Distributed Security Scanner on Top of Python's Task Queue

By Rob Ragan ★ 400 Unknown May 13, 2026
Developer Tools

Archaeologit: Why Deleting Secrets From Your Repo Isn't Enough

By Rob Ragan ★ 143 Unknown May 13, 2026
Cybersecurity

Sn1per: The Shell-Script Orchestrator That Weaponized 90+ Security Tools

By Rob Ragan ★ 9.8k Unknown May 13, 2026
Cybersecurity

Learning Go for Security Work: A Deep Dive into parsiya/Hacking-with-Go

By Rob Ragan ★ 1.8k Unknown May 13, 2026
Cybersecurity

SpiderFoot: How 200+ OSINT Modules Communicate in a Publisher/Subscriber Pipeline

By Rob Ragan ★ 17.7k Unknown May 13, 2026
AI Dev Tools

HASSH: Fingerprinting SSH Implementations Before the Encryption Kicks In

By Rob Ragan ★ 549 Unknown May 13, 2026
Automation

J2EEScan: The Burp Suite Extension That Actually Understands Java Enterprise Hell

By Rob Ragan ★ 676 Unknown May 13, 2026
Cybersecurity

Inside gwen001's pentest-tools: A Bug Bounty Hunter's Arsenal of Single-Purpose Security Scripts

By Rob Ragan ★ 3.3k Unknown May 13, 2026
Cybersecurity

Gurp: Automating Burp Suite Professional from the Command Line with Go

By Rob Ragan ★ 56 Unknown May 13, 2026
LLM Engineering

Building Threat Models in Draw.io: How XML Libraries Turn Free Diagrams into Security Tools

By Rob Ragan ★ 792 Unknown May 13, 2026