// LATEST
Infrastructure
SUIDGuard: Inside a Kernel Extension That Fought macOS Privilege Escalation in 2015
Cybersecurity
PCC: The Two-Day Self-Destructing PHP Security Audit
Developer Tools
Reverse-Engineering Apple's Binary Sandbox Profiles with Python
Developer Tools
Businessifier: Why Penetration Testers Need a Profanity Filter for Their Wordlists
Cybersecurity
XSS ChEF: The Chrome Extension Exploitation Framework That Revealed a Security Crisis
Developer Tools
Breaking WebSocket Security: How koto/socket_io_client Exposes the Browser Sandbox Illusion
Developer Tools
Harpoon: Building a Runtime Function Hooking Library for macOS from First Principles
Developer Tools
Magic Wormhole: Secure File Transfer Using Password-Authenticated Cryptography
AI Agents
Vinchuca: Understanding P2P Botnet Architecture Through a Deliberately Neutered Research Framework
AI Agents
DarkAgent RAT: Dissecting a 2012 Remote Administration Tool for Security Research
AI Dev Tools
Spidernet: What SSH-Based Botnets Teach Us About Remote Administration Gone Wrong
Cybersecurity
Netflix's Sleepy Puppy Docker: Why This Deprecated XSS Hunter Works Only Over HTTP
Developer Tools
Sleepy Puppy: Netflix's Deprecated XSS Hunter and the Evolution of Enterprise Security Testing
Infrastructure
How Netflix Taught the World to Containerize Microservices
Cybersecurity
Sleepy Puppy: How Netflix Built a Callback-Based XSS Detection System That Tracked Payloads Across Time and Applications
Developer Tools
Controlling Your Nest Thermostat Without Google's Permission: A Reverse-Engineering Story
Developer Tools
Parsing Mandrill Inbound Webhooks: A Minimal Python Wrapper Worth Understanding
Developer Tools
Building an SSL MITM Proxy in 100 Lines of Shell Script
Developer Tools
Skyline: Etsy's Ensemble Voting Approach to Zero-Configuration Anomaly Detection
Developer Tools
Pony: A GPG-Backed Secret Store That Fits in a Single File
AI Dev Tools
The Archaeology of Mac Dev Setup: What a 2012 Environment Guide Teaches Us About Developer Tooling Evolution
Cybersecurity
Wifiphisher: Building Convincing Rogue Access Points for Red Team Engagements
Developer Tools
Building a Magic: The Gathering Card Scanner with OpenCV Background Subtraction
Developer Tools