Cybersecurity
Offensive and defensive security tooling explained by a pentester — scanners, exploit frameworks, secrets detection, and the OSS projects shaping modern security work.
372 articles
Cybersecurity
Cyber Riposte: When Your Security Team Wants to Code-Review the Firewall
Cybersecurity
Building Reproducible Penetration Testing Environments with NixOS: nixos-pentest
Cybersecurity
RedAI: When Your Security Scanner Needs to Actually Prove the Exploit Works
Cybersecurity
Caldera: Building Adversary Emulation with Fact-Based Planning Engines
Cybersecurity
Caldera: When Your Red Team Needs a Planning Algorithm, Not Just Another C2
Cybersecurity
Joro: The Web Exploitation Framework That Finally Bridges Proxy, C2, and Team Collaboration
Cybersecurity
JSPrime: The 2013 Browser-Based JavaScript Security Scanner That Pioneered Framework-Aware Static Analysis
Cybersecurity
Nogotofail: Google's On-Path Blackbox Security Testing Framework for Mobile Apps
Cybersecurity
WS-Attacker: The Academic Framework That Exploits SOAP's Hidden Attack Surface
Cybersecurity
PayloadsAllTheThings: The 77,000-Star Security Knowledge Base That Changed How Pentesters Work
Cybersecurity
Acamar: When Less Is More in Subdomain Enumeration
Cybersecurity
Glow: Why Rendering Markdown in the Terminal Shouldn't Require a Browser
Cybersecurity
Security APIs: The Curated Directory That Maps the Threat Intelligence Landscape
Cybersecurity
Inside Mathias Bynens' Dotfiles: The Blueprint for 30,000 macOS Developer Environments
Cybersecurity
Prompt Engineering for Red Teams: How ChatGPT Became an Offensive Security Multiplier
Cybersecurity
Responder: Weaponizing Windows Name Resolution to Harvest Domain Credentials
Cybersecurity
PowerTools: The Deprecated PowerShell Arsenal That Shaped Modern Red Team Operations
Cybersecurity
IIS-ShortName-Scanner: Exploiting a 13-Year-Old Vulnerability Microsoft Won't Fix
Cybersecurity
Inside mubix/post-exploitation: A Time Capsule of Red Team Command-Line Tradecraft
Cybersecurity
PowerSploit: The PowerShell Framework That Taught Defenders What to Fear
Cybersecurity
GetHead: The Browser-Based HTTP Header Security Scanner That Fits in Your Bookmarks Bar
Cybersecurity
Python Pentest Tools: A Curated Gateway to Security Testing's Hidden Arsenal
Cybersecurity
Commix: Automating Command Injection Exploitation with Polymorphic Payloads
Cybersecurity