Cybersecurity
Offensive and defensive security tooling explained by a pentester — scanners, exploit frameworks, secrets detection, and the OSS projects shaping modern security work.
372 articles
Cybersecurity
Smith: The Bug Bounty Wrapper That Makes Meg Actually Useful
Cybersecurity
AWSBucketDump: Weaponizing S3 Misconfigurations With Wordlists and Grep
Cybersecurity
CloudGoat: Learning Cloud Penetration Testing by Breaking Things on Purpose
Cybersecurity
WhatWeb: Ruby-Powered Web Fingerprinting with 1800+ Plugins for Security Reconnaissance
Cybersecurity
RecurseBuster: Why HEAD-First Requests Make Recursive Content Discovery Faster
Cybersecurity
Mining Bug Bounty Scopes at Scale: Inside bounty-targets-data's Automated Intelligence Pipeline
Cybersecurity
Sn1per: The Shell-Script Orchestrator That Weaponized 90+ Security Tools
Cybersecurity
Learning Go for Security Work: A Deep Dive into parsiya/Hacking-with-Go
Cybersecurity
SpiderFoot: How 200+ OSINT Modules Communicate in a Publisher/Subscriber Pipeline
Cybersecurity
Inside gwen001's pentest-tools: A Bug Bounty Hunter's Arsenal of Single-Purpose Security Scripts
Cybersecurity
Gurp: Automating Burp Suite Professional from the Command Line with Go
Cybersecurity
ORTBOT: A Red Teamer's Command Reference That Fits in Your Terminal
Cybersecurity
Running Burp Suite in CI/CD: How Headless-Burp Brings DAST to Your Build Pipeline
Cybersecurity
Automating Burp Suite Pro at Scale: How Carbonator Turns Manual Scans into CI/CD Pipelines
Cybersecurity
Transfer.sh: Building a Command-Line File Sharing Service That Scales to Multiple Cloud Backends
Cybersecurity
Loubia: Weaponizing WebLogic's T3 Protocol Through Java Deserialization
Cybersecurity
Changeme: How Default Credentials Are Hiding in Plain Sight Across Your Infrastructure
Cybersecurity
Inside lcashdol/Exploits: A Shell-First Approach to CVE Proof-of-Concepts
Cybersecurity
WPSploit: Metasploit's Unofficial WordPress Arsenal
Cybersecurity
Vulhub: The Docker-Compose Library That Makes CVE Reproduction Deterministic
Cybersecurity
Building a Private Cloud Proxy Botnet: Inside ProxyCannon-NG's Architecture
Cybersecurity
AD-Attack-Defense: The MITRE ATT&CK Navigation System for Active Directory Security
Cybersecurity
kube-hunter: The Deprecated Kubernetes Penetration Tool That Still Teaches Security
Cybersecurity