// LATEST
Developer Tools
The Hidden Danger of Shell Script VPS Automation: Why L4bF0x/VPS-Scripts Exposes Infrastructure-as-Code's Dirty Secret
Automation
Goxygen: The Full-Stack Generator That Cuts Through Boilerplate Hell
Developer Tools
AJPy: Weaponizing the Apache JServ Protocol for Tomcat Security Testing
Developer Tools
Building CLI Tools with oclif: Lessons from a Deprecated GitHub Search Tool
Cybersecurity
Jaeger: How Uber's Distributed Tracing System Became the OpenTelemetry Standard-Bearer
Developer Tools
CVE-2020-0688: When Microsoft Exchange Shipped the Same Cryptographic Keys to Everyone
Cybersecurity
ShuffleDNS: Why Smart Wildcard Detection Matters More Than Raw DNS Speed
Cybersecurity
tomnomnom/hacks: The Unix Philosophy Applied to Bug Bounty Hunting
AI Dev Tools
Batea: Teaching Machines to Think Like Penetration Testers
Developer Tools
gf: How a 200-Line Go Wrapper Turned grep Into a Security Research Power Tool
Developer Tools
Building a Ghostcat Vulnerability Scanner: Inside CNVD-2020-10487 Detection
Developer Tools
Building a Ghostcat Detector: How fatal0's Go Tool Probes the CVE-2020-1938 Vulnerability
Developer Tools
Sysdig: The Universal System Call Translator That Turns Your Linux Kernel Into a Time Machine
Cybersecurity
tfsec: The Terraform Security Scanner That Became Part of Trivy
Cybersecurity
Scout: When Your Web Fuzzer Needs to Fit in a Single Binary
Developer Tools
Building Payload Generators for ffuf: The Unix Pipeline Approach to Web Fuzzing
Cybersecurity
Building a Browser Extension to Hunt Exposed API Keys: A Deep Dive into KeyFinder's Architecture
Developer Tools
Gopherus: Weaponizing a 1991 Protocol to Exploit Modern SSRF Vulnerabilities
Developer Tools
50mm: Why This S3-Backed Photo Gallery Ditches Databases and Preprocessing
Developer Tools
CVE-2020-7961: Dissecting a Liferay Portal Deserialization Exploit
Developer Tools
FProbe: Fast HTTP Probing with Inline Port Specification for Security Reconnaissance
Cybersecurity
Smogcloud: Finding the AWS Assets Your Security Team Forgot About
Developer Tools
Popular-Site-Subdomains: The Bug Bounty Hunter's Secret Wordlist
Data & Knowledge