// LATEST
Developer Tools
SlackPirate: The Security Tool That Turns Your ChatOps Platform Into a Credential Goldmine
Cybersecurity
How a Groovy Annotation Bypassed Jenkins' Security Sandbox: Dissecting CVE-2019-1003000
Developer Tools
Trickuri: Testing URL Spoofing Vulnerabilities with Chromium's Proxy-Based Attack Simulator
Developer Tools
Metaphone: The Forgotten Phonetic Algorithm That Still Outperforms for Speed
Developer Tools
ioc2rpz: Turning Threat Intelligence Into DNS Policy Without Vendor Lock-In
Cybersecurity
Building Network Scanners in Go: How Ullaakut/nmap Wraps a 25-Year-Old Binary
Developer Tools
Automating ACM Certificate Validation: A Python Script That Clicks the AWS Console Button For You
Developer Tools
Inside CVE-2019-3396: How Velocity Template Injection Turned Confluence Into a Remote Shell
Cybersecurity
KeyHacks: The Bug Bounty Hunter's Cookbook for Validating Leaked API Credentials
AI Agents
Building a Self-Hosted Attack Surface Scanner with Natlas: Architecture Deep-Dive
Developer Tools
Awesome-Asset-Discovery: The Reconnaissance Map Every Security Engineer Needs
Cybersecurity
Inside BlueKeep: Dissecting CVE-2019-0708's RDP Exploit Architecture
Cybersecurity
K8tools: Inside China's Most Popular Offensive Security Arsenal
AI Dev Tools
Tarnish: Building a Static Analysis Pipeline for Chrome Extension Security
Cybersecurity
ffuf: How Go's Concurrency Model Makes It the Fastest Web Fuzzer for Security Testing
Cybersecurity
GourdScanV2: Building a Passive Vulnerability Scanner with Redis-Backed Traffic Interception
Data & Knowledge
Cartography: Mapping Multi-Cloud Attack Surfaces with Neo4j Graph Queries
Cybersecurity
Sliver: The Open-Source C2 Framework That Generates Cryptographically Unique Implants
Developer Tools
GitGot: Why Manual Review Beats Automation for GitHub Secret Hunting
Developer Tools
GoLucene: When Porting a Search Engine Reveals More Problems Than It Solves
Developer Tools
Bleve: Building Full-Text Search Into Go Applications Without the Infrastructure Tax
Data & Knowledge
Riot: A 28-Second Indexing Engine That Taught Me About Go's Memory Trade-offs
Developer Tools
Inside BlueKeep: A Memory Corruption Exploit That Terrified Windows Administrators
Automation