Cybersecurity
Offensive and defensive security tooling explained by a pentester — scanners, exploit frameworks, secrets detection, and the OSS projects shaping modern security work.
372 articles
Cybersecurity
Surf: Finding SSRF Candidates in Cloud Environments Where Traditional Filters Fail
Cybersecurity
How jsluice Uses AST Parsing to Find URLs Hidden in JavaScript String Concatenation
Cybersecurity
wsrepl: The Interactive WebSocket REPL Built for Security Testing
Cybersecurity
Inside CVE-2023-3519: How a 104-Byte Shellcode Compromises Citrix NetScaler Gateway
Cybersecurity
Inside the Adversarial Robustness Toolbox: Building ML Systems That Survive Attacks
Cybersecurity
Promptfoo: The Open-Source LLM Security Scanner That OpenAI and Anthropic Actually Use
Cybersecurity
garak: The LLM Vulnerability Scanner That Tests What Your Prompts Won't Tell You
Cybersecurity
Puncia: When Standard CVE Databases Miss What Nation-States Already Exploit
Cybersecurity
ARPSyndicate/awesome-intelligence: Mapping the Hidden Layer of OSINT Resources
Cybersecurity
Tenacity: Python's Composable Retry Library That Survived the Great Forking
Cybersecurity
CVE-2016-1764: How a JavaScript URI Bypassed iMessage Encryption Without Breaking Crypto
Cybersecurity
Ghauri: SQL Injection Automation That Actually Resumes Your Work
Cybersecurity
ELITEWOLF: How the NSA Detects Attacks on Power Grids and Water Systems
Cybersecurity
Porch Pirate: Mining API Secrets from Postman's Public Workspace Graveyard
Cybersecurity
CALDERA: Building Autonomous Adversary Emulation with MITRE's ATT&CK Framework
Cybersecurity
Logsensor: Scanning Thousands of Subdomains for Login Panels and POST-Based SQL Injection
Cybersecurity
From Bug Report to Security Test in 60 Seconds: Inside Nuclei AI's Template Generation Pipeline
Cybersecurity
Gsec: A Bug Bounty Hunter's Multi-Tool That Wraps Nuclei in Aggressive Automation
Cybersecurity
A2P2V: Automated Attack Path Planning That Bridges Vulnerability Scanning and Exploitation
Cybersecurity
Pentest Muse CLI: When AI Agents Meet Offensive Security Workflows
Cybersecurity
Inside the Security Architect Interview: What 200+ Real Questions Reveal About Hiring at Scale
Cybersecurity
LVE: Building a CVE Database for Language Models, One Prompt at a Time
Cybersecurity
GodNS: A DNS Proxy That Lies for a Living
Cybersecurity