Cybersecurity
Offensive and defensive security tooling explained by a pentester — scanners, exploit frameworks, secrets detection, and the OSS projects shaping modern security work.
372 articles
Cybersecurity
Interlace: The Thread Pool Hack That Parallelizes Your Single-Threaded Security Tools
Cybersecurity
Reconnoitre: The Reconnaissance Automation Tool That Teaches You Not To Need It
Cybersecurity
How Selenium Grid Becomes an SSRF Gateway to Cloud Credentials
Cybersecurity
How a Groovy Annotation Bypassed Jenkins' Security Sandbox: Dissecting CVE-2019-1003000
Cybersecurity
Building Network Scanners in Go: How Ullaakut/nmap Wraps a 25-Year-Old Binary
Cybersecurity
KeyHacks: The Bug Bounty Hunter's Cookbook for Validating Leaked API Credentials
Cybersecurity
Inside BlueKeep: Dissecting CVE-2019-0708's RDP Exploit Architecture
Cybersecurity
K8tools: Inside China's Most Popular Offensive Security Arsenal
Cybersecurity
ffuf: How Go's Concurrency Model Makes It the Fastest Web Fuzzer for Security Testing
Cybersecurity
GourdScanV2: Building a Passive Vulnerability Scanner with Redis-Backed Traffic Interception
Cybersecurity
Sliver: The Open-Source C2 Framework That Generates Cryptographically Unique Implants
Cybersecurity
Building a Reverse Proxy to Patch AWS's Metadata Security Hole (Before IMDSv2 Fixed It)
Cybersecurity
Inside pwn-pulse: A Surgical Shell Script for Pulse Secure VPN Exploitation
Cybersecurity
shhgit: Real-Time Secrets Detection Through Repository Stream Surveillance
Cybersecurity
DNSGen: Cloud-Aware Subdomain Permutation for Modern Infrastructure Reconnaissance
Cybersecurity
Inside the Most Comprehensive AWS Security Tool Arsenal: A Curated Intelligence Repository
Cybersecurity
Faraday: The Open-Source Vulnerability Aggregator That Parses 80+ Security Tools
Cybersecurity
Eyeballer: Training Neural Networks to Triage Thousands of Pentest Screenshots
Cybersecurity
Credcheck: A Modular Framework for Validating Stolen Credentials in Security Testing
Cybersecurity
Scraping GitHub Trending: How go-trending Fills the Gap in GitHub's API
Cybersecurity
GadgetProbe: Mapping Remote Java Classpaths Through Deserialization Side Channels
Cybersecurity
WeirdAAL: The AWS Attack Library That Shows You What Compromised Credentials Can Really Do
Cybersecurity
Dufflebag: How Bishop Fox Built a Distributed Secret Scanner for Public AWS Snapshots
Cybersecurity