Cybersecurity
Offensive and defensive security tooling explained by a pentester — scanners, exploit frameworks, secrets detection, and the OSS projects shaping modern security work.
358 articles
Cybersecurity
Transfer.sh: Building a Command-Line File Sharing Service That Scales to Multiple Cloud Backends
Cybersecurity
Loubia: Weaponizing WebLogic's T3 Protocol Through Java Deserialization
Cybersecurity
Changeme: How Default Credentials Are Hiding in Plain Sight Across Your Infrastructure
Cybersecurity
Inside lcashdol/Exploits: A Shell-First Approach to CVE Proof-of-Concepts
Cybersecurity
WPSploit: Metasploit's Unofficial WordPress Arsenal
Cybersecurity
Vulhub: The Docker-Compose Library That Makes CVE Reproduction Deterministic
Cybersecurity
Building a Private Cloud Proxy Botnet: Inside ProxyCannon-NG's Architecture
Cybersecurity
AD-Attack-Defense: The MITRE ATT&CK Navigation System for Active Directory Security
Cybersecurity
kube-hunter: The Deprecated Kubernetes Penetration Tool That Still Teaches Security
Cybersecurity
Security Best Practices for Developers: Lessons from Sqreen's Open-Source Guide
Cybersecurity
Interlace: The Thread Pool Hack That Parallelizes Your Single-Threaded Security Tools
Cybersecurity
Reconnoitre: The Reconnaissance Automation Tool That Teaches You Not To Need It
Cybersecurity
How Selenium Grid Becomes an SSRF Gateway to Cloud Credentials
Cybersecurity
How a Groovy Annotation Bypassed Jenkins' Security Sandbox: Dissecting CVE-2019-1003000
Cybersecurity
Building Network Scanners in Go: How Ullaakut/nmap Wraps a 25-Year-Old Binary
Cybersecurity
KeyHacks: The Bug Bounty Hunter's Cookbook for Validating Leaked API Credentials
Cybersecurity
Inside BlueKeep: Dissecting CVE-2019-0708's RDP Exploit Architecture
Cybersecurity
K8tools: Inside China's Most Popular Offensive Security Arsenal
Cybersecurity
ffuf: How Go's Concurrency Model Makes It the Fastest Web Fuzzer for Security Testing
Cybersecurity
GourdScanV2: Building a Passive Vulnerability Scanner with Redis-Backed Traffic Interception
Cybersecurity
Sliver: The Open-Source C2 Framework That Generates Cryptographically Unique Implants
Cybersecurity
Building a Reverse Proxy to Patch AWS's Metadata Security Hole (Before IMDSv2 Fixed It)
Cybersecurity
Inside pwn-pulse: A Surgical Shell Script for Pulse Secure VPN Exploitation
Cybersecurity