Cybersecurity
Offensive and defensive security tooling explained by a pentester — scanners, exploit frameworks, secrets detection, and the OSS projects shaping modern security work.
358 articles
Cybersecurity
Hound: How Trigram Indexing Delivers Sub-Second Code Search Without ElasticSearch
Cybersecurity
HackVault: A Security Researcher's Personal Arsenal of Web Exploitation Techniques
Cybersecurity
Chuckle: The Shell Script That Automates Multi-Tool SMB Relay Attacks
Cybersecurity
VisualCodeGrepper: The Legacy SAST Tool That Scans COBOL and Classic ASP When Nothing Else Will
Cybersecurity
WAVSEP: The Forgotten Benchmark That Exposed Security Scanner Snake Oil
Cybersecurity
NoPE Proxy: Intercepting Non-HTTP Traffic Inside Burp Suite
Cybersecurity
Inside GE's Predix Security Archives: What Industrial IoT Documentation Reveals About Enterprise Platform Governance
Cybersecurity
Static Analysis Tools Repository: The Comprehensive Directory That Powers Developer Tool Discovery
Cybersecurity
How a Browser Userscript Bypassed Skype's Message Sanitization
Cybersecurity
Mastering Nmap's Greppable Output: A Field Guide to Unix Pipeline Wizardry
Cybersecurity
Inside EQGRP: A Historical Deep-Dive into the NSA's Leaked Offensive Cyber Arsenal
Cybersecurity
MimiPenguin: Harvesting Linux Credentials from Process Memory Like It's 2007
Cybersecurity
RedSnarf: The Post-Exploitation Credential Harvester That Time (Almost) Forgot
Cybersecurity
The Red Team Infrastructure Wiki: A Blueprint for Resilient Offensive Operations
Cybersecurity
DNSChain: The Blockchain DNS Server That Tried to Kill Certificate Authorities
Cybersecurity
GoFetch: The Self-Replicating PowerShell Worm That Turns BloodHound Graphs Into Automated AD Attacks
Cybersecurity
Security Regression Testing in Django: Testing Your Way Out of Vulnerabilities
Cybersecurity
Building a Serverless Honeytoken System with AWS Lambda: Inside honeyλ
Cybersecurity
hslatman/awesome-threat-intelligence: The Security Analyst's Map to the Threat Intelligence Ecosystem
Cybersecurity
How Netflix Automatically Strips AWS Permissions at Scale with Repokid
Cybersecurity
S3Cruze: The Pentester's Swiss Army Knife for AWS Bucket Security Testing
Cybersecurity
Kubebot: The Slack Security Scanner That Weaponizes Kubernetes Ephemeral Containers
Cybersecurity
Second Order: Finding Subdomain Takeovers Hidden in Your Application Logic
Cybersecurity