Cybersecurity
Offensive and defensive security tooling explained by a pentester — scanners, exploit frameworks, secrets detection, and the OSS projects shaping modern security work.
372 articles
Cybersecurity
Watchtower: When HTML5 LocalStorage Became a Security Audit Database
Cybersecurity
Building a Self-Documenting Security Remediation Pipeline: Lessons from AvP
Cybersecurity
Inside Cockatrice: Building a Cheat-Proof Virtual Tabletop with Qt and Server-Authoritative Design
Cybersecurity
PCC: The Two-Day Self-Destructing PHP Security Audit
Cybersecurity
XSS ChEF: The Chrome Extension Exploitation Framework That Revealed a Security Crisis
Cybersecurity
Netflix's Sleepy Puppy Docker: Why This Deprecated XSS Hunter Works Only Over HTTP
Cybersecurity
Sleepy Puppy: How Netflix Built a Callback-Based XSS Detection System That Tracked Payloads Across Time and Applications
Cybersecurity
Wifiphisher: Building Convincing Rogue Access Points for Red Team Engagements
Cybersecurity
Pupy: The Python C2 Framework That Lives Entirely in Memory
Cybersecurity
IntruderPayloads: The Bug Bounty Hunter's Arsenal for Burp Suite
Cybersecurity
Evilarc: The 200-Line Python Script That Breaks Archive Extraction Everywhere
Cybersecurity
SSVL: OWASP's Attempt to Solve the Vulnerability Data Babel Problem
Cybersecurity
Inspeckage: The Xposed Module That Taught Android Security Engineers How to See Through Apps
Cybersecurity
Mimikittenz: Memory Scraping for Post-Exploitation Without Admin Rights
Cybersecurity
Hound: How Trigram Indexing Delivers Sub-Second Code Search Without ElasticSearch
Cybersecurity
HackVault: A Security Researcher's Personal Arsenal of Web Exploitation Techniques
Cybersecurity
Chuckle: The Shell Script That Automates Multi-Tool SMB Relay Attacks
Cybersecurity
VisualCodeGrepper: The Legacy SAST Tool That Scans COBOL and Classic ASP When Nothing Else Will
Cybersecurity
WAVSEP: The Forgotten Benchmark That Exposed Security Scanner Snake Oil
Cybersecurity
NoPE Proxy: Intercepting Non-HTTP Traffic Inside Burp Suite
Cybersecurity
Inside GE's Predix Security Archives: What Industrial IoT Documentation Reveals About Enterprise Platform Governance
Cybersecurity
Static Analysis Tools Repository: The Comprehensive Directory That Powers Developer Tool Discovery
Cybersecurity
How a Browser Userscript Bypassed Skype's Message Sanitization
Cybersecurity