Cybersecurity
Offensive and defensive security tooling explained by a pentester — scanners, exploit frameworks, secrets detection, and the OSS projects shaping modern security work.
372 articles
Cybersecurity
Raven: A Cautionary Tale of LinkedIn Scraping and the Fragility of Reconnaissance Tools
Cybersecurity
Findsploit: A Single-Command Gateway to Every Exploit Database on Your System
Cybersecurity
megplus: When Bash Wrappers Attack (A Cautionary Tale in Reconnaissance Automation)
Cybersecurity
GetAltName: Direct SSL Certificate Inspection for Subdomain Discovery Beyond Certificate Transparency
Cybersecurity
TruffleHog: The Secret Scanner That Actually Verifies Your Leaked Credentials
Cybersecurity
Inside Java Deserialization Attacks: A Security Cheat Sheet Worth 3,000+ Stars
Cybersecurity
Weaponizing Apache's server-status: How Misconfigurations Leak Request Intelligence
Cybersecurity
Building a GCP Security Auditing Framework: Lessons from Spotify's Deprecated Tool
Cybersecurity
JexBoss: The Blunt Instrument for Testing Legacy JBoss Deserialization Flaws
Cybersecurity
Inside CVE-2017-5638: Dissecting a Python Exploit for Apache Struts2's Most Devastating Vulnerability
Cybersecurity
Snallygaster: The Single-File Security Scanner That Finds What Developers Leave Behind
Cybersecurity
Exploiting .DS_Store Leaks: How ds_store_exp Turns macOS Metadata Into a Security Goldmine
Cybersecurity
GitHack: Weaponizing Exposed .git Folders to Reconstruct Source Code
Cybersecurity
Inside am0nsec/exploit: A Security Researcher's Personal Arsenal of Proof-of-Concept Exploits
Cybersecurity
foospidy/payloads: The 13GB Security Payload Archive Every Pentester Should Know About
Cybersecurity
Statistically Likely Usernames: Why Horizontal Password Attacks Beat Vertical Every Time
Cybersecurity
PwnGitManager: Surgical Git Repository Extraction for Security Researchers
Cybersecurity
Inside can-i-take-over-xyz: The Crowdsourced Database Securing Subdomain Hygiene
Cybersecurity
Red-Teaming-Toolkit: A MITRE ATT&CK-Mapped Arsenal for Offensive Security Operations
Cybersecurity
Curate: Mining VirusTotal's URL Archive for Bug Bounty Reconnaissance
Cybersecurity
EdOverflow/hacks: The Art of Disposable Security Scripts in /usr/local/bin
Cybersecurity
LFISuite: Anatomy of an Automated Local File Inclusion Exploitation Framework
Cybersecurity
Drupalgeddon2: Dissecting the RCE Exploit That Threatened Millions of CMS Installations
Cybersecurity