Cybersecurity
Offensive and defensive security tooling explained by a pentester — scanners, exploit frameworks, secrets detection, and the OSS projects shaping modern security work.
358 articles
Cybersecurity
GitHub Dorks: Mining Public Repositories for Accidentally Leaked Secrets
Cybersecurity
Inside X41's 2017 Browser Security Arsenal: A Historical Deep-Dive into Sandbox Escape Techniques
Cybersecurity
Fuzzapi: A Rails Web Interface for REST API Penetration Testing That Time Forgot
Cybersecurity
aiodnsbrute: How Asyncio Turns DNS Enumeration Into a Concurrency Masterclass
Cybersecurity
Retrace: The LD_PRELOAD Interceptor That Turns Binaries Into Security Playgrounds
Cybersecurity
TheFatRat: Why This 11K-Star Exploit Generator is Both Popular and Problematic
Cybersecurity
XRay: Building a Reconnaissance Pipeline That Bridges Passive OSINT and Active Enumeration
Cybersecurity
Gobuster: Why Go's Concurrency Model Makes It the Fastest Directory Brute-Forcer
Cybersecurity
SecLists: The 57,000-File Repository That Changed Security Testing Forever
Cybersecurity
PMD: Building a Multi-Language Static Analyzer on AST Parsing and Rule Engines
Cybersecurity
Vanquish: The OSCP-Era Orchestrator That Chains Kali's Arsenal Into Attack Pipelines
Cybersecurity
VHostScan: Finding Hidden Web Apps Behind Shared IP Addresses
Cybersecurity
Weaponizing OGNL: How CVE-2017-5638 Turned HTTP Headers Into Remote Shells
Cybersecurity
Inside j0bin/Pentest-Resources: A Pentester's Personal Arsenal Turned Public Repository
Cybersecurity
Hacking Slack's UI: CSS Injection in Electron Apps
Cybersecurity
Bandit: How OpenStack's AST-Powered Security Scanner Catches Python Vulnerabilities Before Deployment
Cybersecurity
Scanners-Box: The Community-Curated Arsenal of 338+ Security Tools You've Never Heard Of
Cybersecurity
Inside struts-scan: A Python 2 Relic That Still Hunts 17 Struts2 Vulnerabilities
Cybersecurity
webanalyze: Mass Technology Detection Without the Browser Overhead
Cybersecurity
Inside a 211MB Wordlist: Engineering Efficient Content Discovery for Web Penetration Testing
Cybersecurity
Striker: The Four-Phase Reconnaissance Scanner That Weaponizes Your Subdomain Enumeration
Cybersecurity
Dracnmap: When Teaching Tools Reveal nmap's Accessibility Problem
Cybersecurity
RED_HAWK: The Last PHP-Based Security Scanner Before Everyone Switched to Python
Cybersecurity