Cybersecurity
Offensive and defensive security tooling explained by a pentester — scanners, exploit frameworks, secrets detection, and the OSS projects shaping modern security work.
358 articles
Cybersecurity
x8: Finding Hidden Parameters Through Differential Response Analysis
Cybersecurity
GitOops: Mapping GitHub CI/CD Attack Paths Like Active Directory
Cybersecurity
CookieMonster: Cracking Weak Session Secrets Across Six Web Frameworks
Cybersecurity
CrowdSec: How Crowdsourced Threat Intelligence Reimagines Intrusion Detection
Cybersecurity
Inside w3c/webappsec: How Browser Security Standards Are Born
Cybersecurity
Mining CommonCrawl's Petabyte Archive for Forgotten URLs with cc.py
Cybersecurity
VulnWhisperer: Building a Unified Vulnerability Intelligence Pipeline from Fragmented Security Tools
Cybersecurity
Machine Learning for Cybersecurity: A Curated Knowledge Base for Security Engineers
Cybersecurity
LunaTrace: The Open-Source Dependency Scanner Born from Log4Shell
Cybersecurity
Dome: The Python Reconnaissance Swiss Army Knife for Subdomain Enumeration
Cybersecurity
24 Hard-Learned Lessons from Smart Contract Hacking Challenges
Cybersecurity
Gorilla: A Rust-Powered Wordlist Generator That Replaces Your Entire Password-Cracking Toolkit
Cybersecurity
Learning Smart Contract Exploits by Running Them: Inside Web3-Graveyard
Cybersecurity
Modernizing Black Hat Python: Converting Offensive Security Code from Python 2 to 3
Cybersecurity
Metlo: The Open-Source API Security Platform That Watches Your Traffic
Cybersecurity
OffensiveNotion: How Rust and Notion's API Create Undetectable Command and Control
Cybersecurity
lsd: Why 16,000 Developers Replaced ls With a Rust Rewrite
Cybersecurity
RedEye: How CISA Built a Time Machine for Red Team Operations
Cybersecurity
Teaching GPT-3 to Crack Your Password: A Research Case Study in Targeted Password Guessing
Cybersecurity
Smap: Why This Nmap Clone Doesn't Touch Your Target
Cybersecurity
CloudProxy: Self-Hosting Your Way Past Cloudflare's Bot Detection
Cybersecurity
Open-CVDB: The Missing CVE Database for Cloud Provider Vulnerabilities
Cybersecurity
Recog: The XML Fingerprint Database Powering Metasploit's Service Detection
Cybersecurity