Cybersecurity
Offensive and defensive security tooling explained by a pentester — scanners, exploit frameworks, secrets detection, and the OSS projects shaping modern security work.
372 articles
Cybersecurity
Jaeger: How Uber's Distributed Tracing System Became the OpenTelemetry Standard-Bearer
Cybersecurity
ShuffleDNS: Why Smart Wildcard Detection Matters More Than Raw DNS Speed
Cybersecurity
tomnomnom/hacks: The Unix Philosophy Applied to Bug Bounty Hunting
Cybersecurity
tfsec: The Terraform Security Scanner That Became Part of Trivy
Cybersecurity
Scout: When Your Web Fuzzer Needs to Fit in a Single Binary
Cybersecurity
Building a Browser Extension to Hunt Exposed API Keys: A Deep Dive into KeyFinder's Architecture
Cybersecurity
Smogcloud: Finding the AWS Assets Your Security Team Forgot About
Cybersecurity
Jaeles: Building a Signature-Based Web Scanner That Speaks YAML
Cybersecurity
Building Custom Query String Fuzzers: Inside qsfuzz's Rule-Based Vulnerability Detection
Cybersecurity
Inside Nuclei Templates: How 12,000 YAML Files Became the Lingua Franca of Vulnerability Detection
Cybersecurity
Inside Nuclei: How YAML Templates Became a Crowdsourced Vulnerability Database
Cybersecurity
Inside pedrib/PoC: A Master Class in Vulnerability Research and Exploit Development
Cybersecurity
Building a GitHub Trending Bot: What 115 Stars Taught Us About Scraping, Storage, and Social Growth
Cybersecurity
GitHacker: Exploiting Exposed .git Directories When Directory Listings Are Disabled
Cybersecurity
gau: Mining Web Archives for Security Reconnaissance Without Touching the Target
Cybersecurity
OneForAll: The Subdomain Enumeration Framework That Aggregates 100+ Data Sources
Cybersecurity
httpx: The Swiss Army Knife of HTTP Reconnaissance That Actually Scales
Cybersecurity
GitHub as an Attack Surface: Automating Reconnaissance with github-search
Cybersecurity
o365spray: How Endpoint Diversity Beats Microsoft's Authentication Rate Limiting
Cybersecurity
Xray: China's Most Popular Closed-Source Vulnerability Scanner
Cybersecurity
Building a Custom HTTP Fingerprinting Engine with GoFingerprint
Cybersecurity
Inside the Vault: What 9,500 Stars Worth of Real Penetration Testing Reports Teach Us About Security
Cybersecurity
The GitHub Exploit Aggregator That Security Teams Don't Talk About Publicly
Cybersecurity