Cybersecurity
Offensive and defensive security tooling explained by a pentester — scanners, exploit frameworks, secrets detection, and the OSS projects shaping modern security work.
358 articles
Cybersecurity
Mining 63,000+ Unmapped CVEs: How missing-cve-nuclei-templates Finds Bug Bounty Gold
Cybersecurity
Bearer: The Open-Source SAST Tool That Actually Cares About Your Users' Privacy
Cybersecurity
Omnispray: Building a Lockout-Aware Password Spraying Framework with Python Asyncio
Cybersecurity
BurpGPT: Teaching Your Security Scanner to Think With LLMs
Cybersecurity
CloudGPT: When ChatGPT Audits Your AWS IAM Policies (And Why That's Fascinating)
Cybersecurity
Inside the Offensive AI Compilation: A Taxonomy of Machine Learning Weaponization
Cybersecurity
When Your LLM Reads Malicious Instructions: Understanding Indirect Prompt Injection
Cybersecurity
Scanning 74,000 WordPress Vulnerabilities in One Command: Inside nuclei-wordfence-cve
Cybersecurity
DefaultCreds-cheat-sheet: Mining 3,711 Default Credentials for Security Testing
Cybersecurity
Afuzz: Language-Aware Web Path Fuzzing for Bug Bounty Hunters
Cybersecurity
Surf: Finding SSRF Candidates in Cloud Environments Where Traditional Filters Fail
Cybersecurity
How jsluice Uses AST Parsing to Find URLs Hidden in JavaScript String Concatenation
Cybersecurity
wsrepl: The Interactive WebSocket REPL Built for Security Testing
Cybersecurity
Inside CVE-2023-3519: How a 104-Byte Shellcode Compromises Citrix NetScaler Gateway
Cybersecurity
Inside the Adversarial Robustness Toolbox: Building ML Systems That Survive Attacks
Cybersecurity
Promptfoo: The Open-Source LLM Security Scanner That OpenAI and Anthropic Actually Use
Cybersecurity
garak: The LLM Vulnerability Scanner That Tests What Your Prompts Won't Tell You
Cybersecurity
Puncia: When Standard CVE Databases Miss What Nation-States Already Exploit
Cybersecurity
ARPSyndicate/awesome-intelligence: Mapping the Hidden Layer of OSINT Resources
Cybersecurity
Tenacity: Python's Composable Retry Library That Survived the Great Forking
Cybersecurity
CVE-2016-1764: How a JavaScript URI Bypassed iMessage Encryption Without Breaking Crypto
Cybersecurity
Ghauri: SQL Injection Automation That Actually Resumes Your Work
Cybersecurity
ELITEWOLF: How the NSA Detects Attacks on Power Grids and Water Systems
Cybersecurity