Starlog — Page 24
// LATEST
Cybersecurity
Inside am0nsec/exploit: A Security Researcher's Personal Arsenal of Proof-of-Concept Exploits
Cybersecurity
foospidy/payloads: The 13GB Security Payload Archive Every Pentester Should Know About
Developer Tools
Building a Lightweight RPC Shell for Apache Axis2: When Metasploit Is Too Much
Cybersecurity
Statistically Likely Usernames: Why Horizontal Password Attacks Beat Vertical Every Time
Developer Tools
BaRMIe: Exploiting Java's Invisible Attack Surface in RMI Services
Automation
Building a Technology Detection Microservice with Wappalyzer API
Automation
GoGrabber: The Web Recon Tool That Screenshots Without Making Network Requests
Cybersecurity
PwnGitManager: Surgical Git Repository Extraction for Security Researchers
Cybersecurity
Inside can-i-take-over-xyz: The Crowdsourced Database Securing Subdomain Hygiene
Cybersecurity
Red-Teaming-Toolkit: A MITRE ATT&CK-Mapped Arsenal for Offensive Security Operations
Developer Tools
Parameth: Brute-Force Parameter Discovery for the APIs Nobody Documented
Developer Tools
ZGrab: The Deprecated Banner Grabber That Mapped the Internet's Security Posture
AI Dev Tools
ZAnnotate: Building a Multi-Source IP Intelligence Pipeline for Internet-Scale Research
Cybersecurity
Curate: Mining VirusTotal's URL Archive for Bug Bounty Reconnaissance
Cybersecurity
EdOverflow/hacks: The Art of Disposable Security Scripts in /usr/local/bin
Cybersecurity
LFISuite: Anatomy of an Automated Local File Inclusion Exploitation Framework
Developer Tools
Building a Bulk Email Breach Checker with Python and Have I Been Pwned
Data & Knowledge
ODAT: The Offensive Oracle Database Toolkit That Security Teams Need to Know
Cybersecurity
Drupalgeddon2: Dissecting the RCE Exploit That Threatened Millions of CMS Installations
Developer Tools
PHPGGC: The Weaponized Library Turning PHP Magic Methods Into Exploitation Chains
Cybersecurity
Cr3dOv3r: Reverse-Engineering a Credential Reuse Attack Framework
Cybersecurity
Smith: The Bug Bounty Wrapper That Makes Meg Actually Useful
Cybersecurity
AWSBucketDump: Weaponizing S3 Misconfigurations With Wordlists and Grep
Developer Tools