Cybersecurity
Offensive and defensive security tooling explained by a pentester — scanners, exploit frameworks, secrets detection, and the OSS projects shaping modern security work.
372 articles
Cybersecurity
Vanquish: The OSCP-Era Orchestrator That Chains Kali's Arsenal Into Attack Pipelines
Cybersecurity
VHostScan: Finding Hidden Web Apps Behind Shared IP Addresses
Cybersecurity
Weaponizing OGNL: How CVE-2017-5638 Turned HTTP Headers Into Remote Shells
Cybersecurity
Inside j0bin/Pentest-Resources: A Pentester's Personal Arsenal Turned Public Repository
Cybersecurity
Hacking Slack's UI: CSS Injection in Electron Apps
Cybersecurity
Bandit: How OpenStack's AST-Powered Security Scanner Catches Python Vulnerabilities Before Deployment
Cybersecurity
Scanners-Box: The Community-Curated Arsenal of 338+ Security Tools You've Never Heard Of
Cybersecurity
Inside struts-scan: A Python 2 Relic That Still Hunts 17 Struts2 Vulnerabilities
Cybersecurity
webanalyze: Mass Technology Detection Without the Browser Overhead
Cybersecurity
Inside a 211MB Wordlist: Engineering Efficient Content Discovery for Web Penetration Testing
Cybersecurity
Striker: The Four-Phase Reconnaissance Scanner That Weaponizes Your Subdomain Enumeration
Cybersecurity
Dracnmap: When Teaching Tools Reveal nmap's Accessibility Problem
Cybersecurity
RED_HAWK: The Last PHP-Based Security Scanner Before Everyone Switched to Python
Cybersecurity
Building a Web Directory Bruteforcer: A Case Study in Go Concurrency
Cybersecurity
Tachikoma: Building Security Alerts on Diffs Instead of State
Cybersecurity
Building Automated DNS Blocklists with Cisco Umbrella's API and Certificate Transparency Logs
Cybersecurity
Inside Awesome-Red-Teaming: A Time Capsule of Offensive Security's Golden Era
Cybersecurity
MoistPetal: Dissecting a Go-Based Malware Framework for Red Team Infrastructure Automation
Cybersecurity
Offensive-Dockerfiles: Containerizing Pentesting Tools for Ephemeral Cloud Attacks
Cybersecurity
AutoSploit: When Metasploit Meets Mass Automation (And Why That's Terrifying)
Cybersecurity
gowitness: How Chrome Headless Became a Recon Powerhouse for Security Teams
Cybersecurity
gnmapper: Converting Nmap's Greppable Output to CSV with 50 Lines of Bash
Cybersecurity
SubOver: How Go Concurrency Revolutionized Subdomain Takeover Detection
Cybersecurity