Cybersecurity
Offensive and defensive security tooling explained by a pentester — scanners, exploit frameworks, secrets detection, and the OSS projects shaping modern security work.
372 articles
Cybersecurity
Inside EQGRP: A Historical Deep-Dive into the NSA's Leaked Offensive Cyber Arsenal
Cybersecurity
MimiPenguin: Harvesting Linux Credentials from Process Memory Like It's 2007
Cybersecurity
RedSnarf: The Post-Exploitation Credential Harvester That Time (Almost) Forgot
Cybersecurity
The Red Team Infrastructure Wiki: A Blueprint for Resilient Offensive Operations
Cybersecurity
DNSChain: The Blockchain DNS Server That Tried to Kill Certificate Authorities
Cybersecurity
GoFetch: The Self-Replicating PowerShell Worm That Turns BloodHound Graphs Into Automated AD Attacks
Cybersecurity
Security Regression Testing in Django: Testing Your Way Out of Vulnerabilities
Cybersecurity
Building a Serverless Honeytoken System with AWS Lambda: Inside honeyλ
Cybersecurity
hslatman/awesome-threat-intelligence: The Security Analyst's Map to the Threat Intelligence Ecosystem
Cybersecurity
How Netflix Automatically Strips AWS Permissions at Scale with Repokid
Cybersecurity
S3Cruze: The Pentester's Swiss Army Knife for AWS Bucket Security Testing
Cybersecurity
Kubebot: The Slack Security Scanner That Weaponizes Kubernetes Ephemeral Containers
Cybersecurity
Second Order: Finding Subdomain Takeovers Hidden in Your Application Logic
Cybersecurity
Backslash-Powered Scanner: Finding Zero-Day Injections Through Differential Analysis
Cybersecurity
GitHub Dorks: Mining Public Repositories for Accidentally Leaked Secrets
Cybersecurity
Inside X41's 2017 Browser Security Arsenal: A Historical Deep-Dive into Sandbox Escape Techniques
Cybersecurity
Fuzzapi: A Rails Web Interface for REST API Penetration Testing That Time Forgot
Cybersecurity
aiodnsbrute: How Asyncio Turns DNS Enumeration Into a Concurrency Masterclass
Cybersecurity
Retrace: The LD_PRELOAD Interceptor That Turns Binaries Into Security Playgrounds
Cybersecurity
TheFatRat: Why This 11K-Star Exploit Generator is Both Popular and Problematic
Cybersecurity
XRay: Building a Reconnaissance Pipeline That Bridges Passive OSINT and Active Enumeration
Cybersecurity
Gobuster: Why Go's Concurrency Model Makes It the Fastest Directory Brute-Forcer
Cybersecurity
SecLists: The 57,000-File Repository That Changed Security Testing Forever
Cybersecurity