Vulnerability
SNMP Exposure: Using Nmap and snmpwalk to Check Access
How I check SNMP exposure, interpret UDP scan results, and distinguish read access from dangerous management permissions.
#tools
Tools and Scripting
reconFTW: Building a Repeatable Reconnaissance Workflow
How I set up reconFTW, choose a bounded workflow, and turn collected reconnaissance data into findings I can verify.
Security Blogs
40 Security Research Resources, Grouped by the Question They Answer
A practical directory for infrastructure research, threat intelligence, code search, and historical context, with corrections to older entries.
Security Blogs
Sliver C2: Setting Up a Small Windows and Linux Lab
How I separate Sliver servers, operator clients, and implants, then build a bounded lab with evidence for each connection step.
Security Blogs
Download Website Files Recursively with Wget
How I use Wget to download linked files under a web directory, control recursion, and check what was saved.
Tools and Scripting
OutBandit: Investigating Out-of-Band Application Behaviour
Why I built OutBandit for Burp Suite, how I approach callback testing, and what an HTTP or DNS interaction can actually prove.
Tools and Scripting
Nuclei: Repeatable Security Checks with Templates
How I use Nuclei templates to run focused security checks, preserve evidence, and validate findings before reporting them.
Security Blogs
Donut Shellcode: Understanding the Loader and Testing Detection Claims
What Donut generates, how its managed-code loader works, and the evidence I need before describing any endpoint protection bypass.
Tools and Scripting
Frida: Inspecting Android TLS Checks and Native Applications
How I use Frida to inspect Android TLS behaviour, distinguish UI changes from real bypasses, and trace selected Windows API calls.
All 9 posts shown