Cybersecurity
Offensive and defensive security tooling explained by a pentester — scanners, exploit frameworks, secrets detection, and the OSS projects shaping modern security work.
372 articles
Cybersecurity
24 Hard-Learned Lessons from Smart Contract Hacking Challenges
Cybersecurity
Gorilla: A Rust-Powered Wordlist Generator That Replaces Your Entire Password-Cracking Toolkit
Cybersecurity
Learning Smart Contract Exploits by Running Them: Inside Web3-Graveyard
Cybersecurity
Modernizing Black Hat Python: Converting Offensive Security Code from Python 2 to 3
Cybersecurity
Metlo: The Open-Source API Security Platform That Watches Your Traffic
Cybersecurity
OffensiveNotion: How Rust and Notion's API Create Undetectable Command and Control
Cybersecurity
lsd: Why 16,000 Developers Replaced ls With a Rust Rewrite
Cybersecurity
RedEye: How CISA Built a Time Machine for Red Team Operations
Cybersecurity
Teaching GPT-3 to Crack Your Password: A Research Case Study in Targeted Password Guessing
Cybersecurity
Smap: Why This Nmap Clone Doesn't Touch Your Target
Cybersecurity
CloudProxy: Self-Hosting Your Way Past Cloudflare's Bot Detection
Cybersecurity
Open-CVDB: The Missing CVE Database for Cloud Provider Vulnerabilities
Cybersecurity
Recog: The XML Fingerprint Database Powering Metasploit's Service Detection
Cybersecurity
Akto: The API Security Platform That Learns From Your Production Traffic
Cybersecurity
Mining 63,000+ Unmapped CVEs: How missing-cve-nuclei-templates Finds Bug Bounty Gold
Cybersecurity
Bearer: The Open-Source SAST Tool That Actually Cares About Your Users' Privacy
Cybersecurity
Omnispray: Building a Lockout-Aware Password Spraying Framework with Python Asyncio
Cybersecurity
BurpGPT: Teaching Your Security Scanner to Think With LLMs
Cybersecurity
CloudGPT: When ChatGPT Audits Your AWS IAM Policies (And Why That's Fascinating)
Cybersecurity
Inside the Offensive AI Compilation: A Taxonomy of Machine Learning Weaponization
Cybersecurity
When Your LLM Reads Malicious Instructions: Understanding Indirect Prompt Injection
Cybersecurity
Scanning 74,000 WordPress Vulnerabilities in One Command: Inside nuclei-wordfence-cve
Cybersecurity
DefaultCreds-cheat-sheet: Mining 3,711 Default Credentials for Security Testing
Cybersecurity