Cybersecurity
Offensive and defensive security tooling explained by a pentester — scanners, exploit frameworks, secrets detection, and the OSS projects shaping modern security work.
372 articles
Cybersecurity
Spring Boot Actuator Exploitation: A Security Researcher's Arsenal
Cybersecurity
PowerZure: When Your Azure Credentials Become Someone Else's Attack Surface
Cybersecurity
The macOS Security Arsenal: A Critical Review of kai5263499/osx-security-awesome
Cybersecurity
VulnX: The Aggressive CMS Scanner That Automates What Penetration Testers Do Manually
Cybersecurity
badPods: The Kubernetes Security Testing Toolkit That Maps Every Pod Privilege Escalation Path
Cybersecurity
BruteShark: Automating Credential Extraction from Network Captures with .NET Core
Cybersecurity
KingOfBugBountyTips: A Weaponized Command Reference for Security Reconnaissance
Cybersecurity
h2cSmuggler: Exploiting HTTP/2 Cleartext Upgrades to Bypass Reverse Proxies
Cybersecurity
Bento Toolkit: Running GUI Pentesting Tools in Fedora Containers with X11 Forwarding
Cybersecurity
Cloudlist: Multi-Cloud Asset Discovery for Attack Surface Management
Cybersecurity
Axiom: Distributing Security Scans Across Hundreds of Cloud Instances With Shell Scripts
Cybersecurity
Crossfeed: How CISA Built a Serverless Attack Surface Monitor on AWS
Cybersecurity
Arsenal: A Command Injection Framework for Pentesting (That Literally Injects Your Shell)
Cybersecurity
Intrigue-ident: Multi-Protocol Fingerprinting with Built-in CVE Mapping
Cybersecurity
Inside CVE-Exploits: Dissecting Real-World Memory Corruption Techniques in C
Cybersecurity
ConsoleMe: How Netflix Built a Self-Service AWS IAM Control Plane (Before Archiving It)
Cybersecurity
Secretz: How a Go Tool Exposed the Dark Side of Travis CI Build Logs
Cybersecurity
Confused: Detecting Dependency Confusion Before Attackers Exploit Your Private Packages
Cybersecurity
Hacking the Cloud: The Crowdsourced Encyclopedia That Red and Blue Teams Actually Use
Cybersecurity
Hetty: Building a Modern HTTP Security Proxy with Go and GraphQL
Cybersecurity
Mosint: Building a Speed-Layer Email OSINT Tool with Go Concurrency
Cybersecurity
diodb: The Open Database Solving Security Research's Legal Gray Area
Cybersecurity
ksubdomain: How Stateless DNS Brute-Forcing Achieves 1.6 Million Packets Per Second
Cybersecurity