> your AI agent picks dependencies from memory; give it dated facts — try starlog.dev ↗ vet your agent's deps ↗ vibe-coding is fine. vibe-importing isn’t. — try starlog.dev ↗ vibe-importing isn’t fine ↗ your agent has never seen your private packages — try starlog.dev ↗ facts for private packages ↗ a linter for the dependencies your AI agent picks — try starlog.dev ↗ a linter for agent deps ↗ whois is redacted, cdns mask the rest — get the real operator — try whoisgeni.us ↗ who really runs that domain ↗ domain attribution that shows its work — full evidence chain — try whoisgeni.us ↗ domain intel w/ evidence ↗

← All authors
Rob Ragan

Rob Ragan

Offensive security researcher and AI agent architect. Founder of Starlog.

offensive securityAI agentspenetration testingred teamingapplication security

1848 articles

Rob Ragan is an offensive security researcher and AI agent architect who has spent two decades breaking into systems and building tools to automate the process.

// ARTICLES BY ROB RAGAN

Developer Tools

Gopherus: Weaponizing a 1991 Protocol to Exploit Modern SSRF Vulnerabilities

★ 3.4k Python May 12, 2026
Developer Tools

50mm: Why This S3-Backed Photo Gallery Ditches Databases and Preprocessing

★ 56 Go May 12, 2026
Developer Tools

CVE-2020-7961: Dissecting a Liferay Portal Deserialization Exploit

★ 4 May 12, 2026
Developer Tools

FProbe: Fast HTTP Probing with Inline Port Specification for Security Reconnaissance

★ 193 Go May 12, 2026
Cybersecurity

Smogcloud: Finding the AWS Assets Your Security Team Forgot About

★ 348 Go May 12, 2026
Developer Tools

Popular-Site-Subdomains: The Bug Bounty Hunter's Secret Wordlist

★ 187 May 12, 2026
Data & Knowledge

Go-Flashpaper: Building a Memory-Only Secret Sharing Service with Honeypot Forensics

★ 153 Go May 12, 2026
Developer Tools

Mining Apache's server-status: A Security Researcher's Field Guide

★ 24 Python May 12, 2026
Automation

LazyRecon: The Bash Script That Chains 12 Security Tools Into One Reconnaissance Pipeline

★ 2.0k Shell May 12, 2026
Developer Tools

genkiroid/cert: Inspect TLS Certificates Without the OpenSSL Ceremony

★ 240 Go May 12, 2026
Automation

Hunting .DS_Store Files at Scale: How internetwache's Scanner Exploits macOS Metadata Leaks

★ 35 Go May 12, 2026
Developer Tools

JSScanner: The Bug Bounty Hunter's Swiss Army Knife for JavaScript Reconnaissance

★ 273 Shell May 12, 2026