Introducing Uncial: rendered Quick Look previews and thumbnails for Markdown in Finder, an editor with Live Preview, three themes, diagrams and math, and no JavaScript from the files you open.
Introducing bruter: 55 protocols, scan file auto-detection, embedded bad SSH keys, and a module interface so simple you can add a new protocol in 50 lines.
Your AI assistant has access to your files, your messages, your shell. Here's how to make sure nobody else does.
Major update to leaker - from 2 to 9 sources, new search types, JSONL output, and many quality-of-life improvements.
Introducing a new tool to find and enumerate public leaks via passive sources.
How a hidden macOS Finder file leaks the full directory tree of a web application, what is inside the format, and a tool to walk it recursively.
My vision on describing and categorizing types of offensive security services with notes of when each category should be used.
Several considerations on market shift from classic security research to red teaming everything.
Exploring several ways to abuse NetNTLMv1 in corporate networks.
My thoughts about obtaining a bachelor's degree and my future plans.
Introducing a new tool to find and enumerate SMB shares in networks and Active Directory domains.
Alternative to scanning methods to achieve network, host and port identification. This post covers Active Directory domains and Kubernetes clusters.
Advanced topics on network, host and port identification with defense evasion, automation of the scanning and results visualization.
An overview of optimizing methods for network, host and port identification with nmap tool.
Passing PEN-210 and the OSWP on the first attempt: building a wireless lab, preparing a cheat sheet, and what the exam expects.
Passing PEN-200 and the OSCP on the first attempt: how I prepared, how I kept notes, what exam day was like, and what it changed at work.
A cheat sheet for moving files to and from Windows hosts with base64, certutil, bitsadmin, curl, SMB and FTP.
Getting more out of hash cracking: dictionary masks, better wordlists, distributed rigs, cloud GPUs and online databases.
Cross-compiling Windows binaries from Kali Linux with mingw-w64, plus the prebuilt ones Kali already ships.
Installing Microsoft Store apps without the Store, by turning on Developer Mode and sideloading the package.